‍

API Security
at Draftable.

Here you'll find security information about all of Draftable’s API services.

Read the technical detail
Visit the Trust Center

‍

Where your documents are processed

‍

On our cloud infrastructure hosted by Amazon Web Services, using Amazon S3 for document storage and Amazon RDS for application data.

‍

If you need documents to stay inside your own network, Draftable API Self-Hosted runs the same comparison engine and can be deployed on your own infrastructure.

‍

How your data is protected

‍

How long we keep it

‍

You decide. Data you submit is retained until you remove it, and the API gives you three ways to control that:

When a deletion is processed the data becomes immediately inaccessible. Copies in encrypted backups age out automatically within 30 days.

‍

Certifications
‍and compliance.

ISO/IEC 27001:2022 certified, SOC 2 Type II attested, independently penetration tested, and GDPR compliant. See our full security and compliance program.

Learn More

FAQs

Can we control where our data is hosted?

Accounts created through draftable.com are hosted in our US data centre. We also operate an EU data centre and can provision your account there on request. Other regions are possible where there is enough customer commitment to support the deployment. Talk to us about your requirements.

‍

Do you use our documents to train AI?

No. Our comparison algorithm is deterministic and rules-based, with no machine learning involved. We do not use documents submitted by our commercial customers to train any model, and we will not.

‍

Can we run our own penetration test?

Yes, after obtaining written consent and mutual agreement on the penetration testing scope. If you self-host, the deployment is yours to test.

‍

Trusted by 1,300 law firms and legal teams globally.

Join 1,300+ legal teams using Draftable.
‍Get started for free.