N1 — AI-generated
Template created by ContrActual's LLM.
Trust
Security, compliance and transparency
Everything a lawyer or client needs to trust ContrActual.
Trust
N1-N4 credibility system + AES
N2 — By jurist
Template drafted by a named jurist.
N3 — AI reviewed
AI analyses your customised contract.
N4 — Lawyer
A marketplace lawyer validates the specific contract.
AES — Advanced electronic signature
eIDAS-compliant. Sealed PDF, audit trail kept for 7 years.
Audit trail
Every action is recorded.
From opening the document to the final signature, events are logged with timestamp, IP address and cryptographic hash.
- ›Append-only — cannot be modified retroactively.
- ›Verifiable hash chain for each contract.
- ›PDF export with audit certificate at the end.
GDPR
Data stored in the EU, under control.
ContrActual's infrastructure runs exclusively in the EU. We have a signed DPA, processing register, and data export / deletion mechanisms.
- ›DPA available on request, signable online.
- ›Full export in machine-readable format (JSON/CSV).
- ›Irreversible deletion on request, subject to legal retention.
eIDAS
AES signing, QES on demand.
The advanced electronic signature (AES) is implemented in-house, compliant with the eIDAS Regulation. For cases requiring QES, we integrate certified providers.
- ›X.509 certificate per signer, validated at every signature.
- ›PAdES — signature embedded in PDF, verifiable offline.
- ›RFC 3161 timestamp from an accredited TSA.
Storage
Immutable PDFs, kept for 7 years.
Signed documents are stored with Object Lock in WORM mode (Write-Once-Read-Many), encrypted at rest. They cannot be overwritten or deleted before the term.
- ›AES-256 encryption at rest, TLS 1.3 in transit.
- ›Cross-region replication for disaster recovery.
- ›Configurable retention, minimum 7 years for contracts.