Enterprise contract management system security, access and data control
Contracts hold your prices, your liabilities and your people's salaries. Before a CFO, COO or General Counsel lets them into any enterprise contract management system, the questions are the same: who can see what, what is recorded, where the data goes, and how you get it back. This page answers those questions plainly, feature by feature, and says which plan includes each control. It lists what we do. It does not list certifications, because we only state what we can stand behind.
Data protection
Encrypted in transit and at rest
Every contract, extracted field, comment and signature record is encrypted in transit and at rest. Files move between your browser and our servers over encrypted connections, and stored documents and database records are encrypted on disk.
- Original files are stored exactly as uploaded, alongside the extracted data, so nothing is rewritten or lost in processing.
- Signed PDFs keep their audit certificate attached, filed in the repository next to the contract record.
We do not train AI models on your contracts
AI extraction reads a contract to fill its fields for you. Your contracts, clauses and extracted data are not used to train AI models, ours or anyone else's. The extraction serves your repository and nothing more.
Access control
Roles and permissions per folder
On Plus, Pro and Enterprise, access is set by role and by folder. HR agreements stay visible to HR, board documents to the board, customer contracts to sales and finance. A person who has no access to a folder does not see its contracts in search results, on the dashboard or in exports.
- Roles decide what a person can do with a contract, from reading it to approving it and sending it for signature.
- Folder permissions decide where they can do it.
- Contract owners receive alerts for their own contracts, so alerts do not leak terms to people outside the folder.
Starter is built for a small team of 3 seats that shares one view of every contract. When you need to separate access, Plus adds roles and folder permissions.
SSO with SAML and SCIM provisioning on Enterprise
Enterprise connects sign-in to your identity provider through SAML single sign-on, so people use the company account and your password and multi-factor rules apply. SCIM provisioning creates and removes accounts from your directory, so a leaver loses access to contracts when IT disables them, not when someone remembers.
Accountability
An audit log of who did what
Plus and above record an audit log: who uploaded, viewed, edited, approved, sent and signed each contract, and when. Approvals carry their comments, and e-signature adds an audit certificate to the signed PDF. When an auditor, a board member or opposing counsel asks who approved a term, you have the answer on one screen. Enterprise adds audit log export, so your security or compliance team can keep the record in its own systems.
Your data, your exit
Export everything, any time
Your contracts stay yours. Export everything, any time. Every plan exports the contract register to CSV with the extracted fields, and the original files stay downloadable. Pro adds reporting exports by counterparty, department and renewal forecast, and a REST API for scripted access. If you leave, you take the files and the data with you.
Retention on your terms
On Enterprise, custom retention lets you set how long contracts and their records are kept, so the system follows your records policy and your legal hold decisions rather than a default.
Sensitive categories of data
If your contracts contain protected health information or other regulated data, talk to us about your requirements before uploading. Our healthcare contract management software page explains how healthcare organisations use the product for vendor and payer agreements.
Enterprise
Security review, DPA and procurement support
Enterprise includes support for your security review: we answer your questionnaire, walk your team through how the service handles data, and sign a data processing agreement. It also includes an uptime SLA, dedicated onboarding with migration of your existing contract archive, and annual invoicing by bank transfer with the procurement paperwork your finance team needs.
- SSO with SAML and SCIM provisioning, unlimited seats.
- Custom retention and audit log export.
- DPA and security review support.
- Uptime SLA, dedicated onboarding and archive migration.
Write to [email protected] or use the Talk to sales button, and tell us what your review needs.
Why decision makers look at this before price
A single unwanted auto-renewal on a vendor or SaaS contract often costs more than a year of the subscription. Take a $24,000 per year software contract that renews for another year because nobody sent notice in time: that one miss costs about 27 times a year of Plus billed yearly at $888. Controls that make sure the right person sees the deadline, and records that show who decided what, are how an enterprise contract management system pays for itself. The alert logic is on our contract renewal management software page, and plan prices are on our contract management system cost page.
Which security certifications do you hold?
We do not claim certifications on this site. We describe the controls we operate, and Enterprise customers get security review support and a DPA so their team can assess the service directly.
Do you train AI models on our contracts?
No. Your contracts and extracted data are not used to train AI models.
Can we control who sees which contracts?
Yes. Plus, Pro and Enterprise include roles and permissions per folder. A person without access to a folder does not see its contracts anywhere in the product.
Which plan includes SSO?
SSO with SAML and SCIM provisioning are on Enterprise, together with unlimited seats, custom retention, audit log export, an uptime SLA and DPA support.
Can we get all our data out?
Yes. Every plan exports the contract register to CSV and keeps the original files downloadable. Pro adds a REST API and reporting exports.
Related pages
Bring your security questions
Tell us how your company handles contract data, and we will show you how Agreementsoftware fits it. Or start on Plus today and set up folder permissions in an afternoon.