SIFT-logo
Get a Demo

LegalSifter Subprocessors

OpenAI
OpenAI
Large Language Model (LLM) Provider
Large Language Models (LLM) and other API services used by the ReviewPro application.

US

 

 
Anthropic
Anthropic
Large Language Model (LLM) Provider
Large Language Models (LLM) and other API services used by the ReviewPro application.

US

 

 

 

Frequently Asked Questions

1. How will you provide assurance that you are meeting your compliance requirements? (For example, SOC 2 report)
  • LegalSifter has achieved SOC 2 and will provide its report upon request.
  • We host LegalSifter Review and LegalSifter Organize on Amazon Web Services.  Attached is their SOC compliance site: Amazon SOC Compliance Site.
2. Please provide a listing of where your data centers and off
  • We host LegalSifter Review and LegalSifter Organize environments at Amazon Web Services Northern Virginia, Singapore, London, Ireland, and Beijing - see Amazon Global Infrastructure.
  • We will host LegalSifter Review and LegalSifter Organize data at other Amazon Web Services locations at the request of the client or partner.
3. Are any of your data centers, servers, or data storage locations outside of the US?
In general, no. We offer locations outside of the US for some non-US clients.
4. If we must retain and generate data to support a legal matter, will you allow data to be put on retention hold?
Yes.
5. What if data is co-mingled with another client's data?
Client data is not co-mingled with another client's data, except in the case of research and development and only if you give us permission to use such data for research and development.
6. What type of database environment is used to store data (multi-instance or multi-tenant)?
We are primarily a multi-tenant company, as of 2017.
7. What integrations are required?
LegalSifter Review and LegalSifter Organize do not require integrations.
8. Does LegalSifter acquire any rights to our data through the agreement, including intellectual property rights? Do you use client data to promote your business, such as collating client data as market information or selling the client behavior for third party marketing?
We ask our clients if they will allow us to use their contracts for research purposes only - to further our machine learning algorithms (“Sifters”). All clients benefit from our improved Sifters, and our Sifters need client data to do that.  Each client may decline to give us such permission when we work through our subscription agreement. We will also ask each client for permission to use their name and logo in marketing materials. If we do not have a client’s express written permission on either front, we will not acquire any rights to its data, and we will not use a client's name and logo for marketing purposes.
9. For an audit or security incident, will we be able to audit controls via a third party?
Yes.
10. What is the process to export data?
  • LegalSifter Organize has an export button available at all times to clients, allowing them to export their data into xls format.
  • LegalSifter Review has an export button available to all clients, allowing them to export their sifted documents to docx format.
11. How long is my data stored in LegalSifter Review?
  • 15 days after a user deletes a contract in the LegalSifter Review (moves to Trash, then Deletes from Trash), LegalSifter permanently excises the associated contract files. LegalSifter retains the name of the file, the document type, and the account that uploaded it for reporting purposes as long as the account is open.
  • LegalSifter Review allows organizations to disable excision of deleted documents via a setting. This can be done for litigation hold or any other client need.
  • 30 days after a company or individual terminates their contract or trial for LegalSifter Review, LegalSifter permanently excises all data in the database and datastore.
  • Please note this refers to the LegalSifter Review, not the data that is in the R&D research repository. Copies of contracts are there if the client allowed so in their executed agreement with LegalSifter.
12. How long is my data stored in LegalSifter Organize?
  • 30 days after a company or individual terminates their contract, project, or trial for LegalSifter Organize, LegalSifter permanently excises all data in the database and datastore.
  • Please note this refers to the LegalSifter Organize product, not the data that is in the R&D research repository. Copies of contracts are there if the client allowed so in their executed agreement with LegalSifter.
13. What happens if I need extended access to documents, in cases such as litigation hold?
LegalSifter ensures that clients may specify when Client Data is deleted from LegalSifter’s systems, and to separate content and manage Client Data under differing scenarios (e.g., for litigation hold).
14. What will LegalSifter do in the case of a data breach?
LegalSifter will notify client(s) of any data breach within twenty-four (24) hours of becoming aware of any confirmed (a) breach of network or computing assets that result in potential or actual unauthorized access to any Client Data, or (b) misuse, potential disclosure or loss of, or inability to account for, any Client Data.