Trust
Where your contract goes
What happens to your document, step by step — and how you can check it.
You upload
Access is scoped to your own account, so other users can't see your documents or analyses unless you create a share link.
Stored in Frankfurt
Your data is encrypted in transit (TLS) and at rest.
Analyzed
Analyzed by Anthropic — possibly outside the EU. Never used to train AI.
File deleted after 30 days
Your report stays until you delete it.
Your documents and account are stored in Frankfurt, Germany. The AI analysis itself may run outside the EU; such transfers rely on safeguards such as Standard Contractual Clauses.
330 / 330
quotes found word for word
How we test what we say
In a test on 29 public commercial contracts (22 September 2026), 330 of 330 quotes in the final reports appeared word-for-word in the contract; 19 findings carried no quote. This checks that quotes are copied exactly — not whether every finding is right.
Every report goes through the same check before you see it: a quote that isn't found word-for-word in your document is corrected, removed or clearly labeled.
Your controls
- Delete everything yourself: Settings → Delete my account — permanent and immediate.
- FixMyContract does not train AI models on your contracts, and Anthropic, which runs the analysis, is contractually barred from doing so.
- The file you upload is deleted automatically 30 days after upload. From 30 September 2026, your report stays in your account until you delete it. Anything you delete yourself is removed from the service right away.
- Anthropic deletes the text we send it, and the analysis it returns, within 30 days at most. If a request is flagged under its Usage Policy, it may be kept for up to 2 years, and related safety scores for up to 7 years.
- We never sell your data.
What we don't claim
- Informational analysis — not legal advice.
- For scanned or photographed pages, the report tells you the quotes couldn’t be matched.
- We don’t hold a security certification (such as SOC 2).
- Stored data is encrypted at rest by our database provider. The service has to read your contract to analyze it, so this is not encryption that hides it from us.
Who processes your data
| AI analysis | Anthropic |
| Database, sign-in & files | Supabase |
| Hosting & cookie-free measurement | Vercel |
| Error monitoring (documents stripped) | Sentry |
| Email delivery | Resend |
| Encrypted database backups | GitHub |
Same list as our Privacy Policy, section 07.
Found a security issue?
Our disclosure policy and contact are published at /.well-known/security.txt.
Using another AI tool?
Before uploading a contract to any AI tool, check its data settings. According to Google’s own help pages (September 2026), free and personal Gemini accounts may use chats to improve models unless you turn that off, and Google notes that some Gemini chats are reviewed by people. Business and enterprise versions have different defaults.