For legal professionals

What happens to what you submit

If you are a lawyer, you have confidentiality obligations we cannot discharge for you. What we can do is tell you precisely how this service handles data, so that your own assessment is quick and well-evidenced. This page is written to be printed and put in a file. Everything on it is also in our Terms of Use and Privacy Policy, which are the binding versions.

Current as of August 3, 2026

The questions a reviewer asks

Is anything I submit used to train an AI model?

No. We do not use your search terms, your uploaded documents, or text extracted from them to train, fine-tune, or improve any model — ours or anyone else’s. Anthropic, which provides the model that performs the analysis, states in its commercial API terms that it does not train on data submitted through the API. That commitment is Anthropic’s own and made in its terms; we rely on it, and we are not in a position to guarantee another company’s conduct on its behalf.

Who can read a document I upload?

Nobody. Uploaded files are parsed in memory and never written to disk or object storage, so no copy exists for anyone to open. There is no human review step in the analysis pipeline, and no employee or contractor has a route to the contents of your file.

What is transmitted, and to whom?

The text extracted from your document is sent to Anthropic for analysis. When you analyse a public website rather than uploading a file, the page is retrieved by Firecrawl. Those are the only two processors that receive document or page content. Every other provider we use, and exactly what each receives, is listed in the Privacy Policy.

What is retained, and for how long?

The uploaded file itself: never retained. The analysis produced from it — which includes short quoted excerpts from the document — is kept for 365 days, or until you delete it, whichever is first. You can delete any report yourself at any time. Diagnostic error logs, which record the file name but never file contents, are deleted after 30 days. These deletions run automatically on a daily schedule.

Do file names leave your systems?

No. File names are recorded in our own error logs so faults can be investigated, and are deleted with those logs after 30 days. They are deliberately excluded from what we send to our third-party error-monitoring provider, because a file name can itself disclose the existence and the parties of a matter.

Where is the data held?

In the United States — database in AWS US East (N. Virginia), application on Vercel’s US infrastructure, analysis by Anthropic and Firecrawl, both US-based. For EEA and UK users this means a transfer to the US; Standard Contractual Clauses are available in our Data Processing Agreement.

What happens if there is a breach?

If we confirm a breach affecting personal information, we notify affected users within 72 hours of confirming it, with what happened, what data was involved, and what we are doing about it.

Can I get a DPA?

Yes. A Data Processing Agreement is available on request for Team and Enterprise plans, covering processing roles, sub-processors, international transfers, security obligations and breach notification. Email hello@contact.termswatchdog.com.

What we are not

Not certified. TermsWatchdog holds no SOC 2, ISO 27001, or ISO 27701 certification, and none is currently in progress. Our infrastructure providers hold their own certifications; those are theirs, not ours, and we will not present them as though they covered us.
Not audited for access. We do not currently maintain an access log of our own processing, so we cannot produce a record of who viewed what and when.
Not a law firm, and not legal advice. Our analysis is informational. It does not constitute legal advice or a legal opinion, and no attorney–client relationship arises from using this service.
Not a substitute for your own judgment. Whether you may use this service for a particular matter, and whether client consent is required first, is your professional determination. We have not made it for you and this page does not purport to.

What remains your responsibility

Our handling of a document does not change your obligations to whoever entrusted it to you. A confidentiality undertaking or protective order binds you regardless of how carefully we treat the file, and the fact that we discard it does not make it yours to share. Uploading a third party’s document is a disclosure decision, and it is yours.

You retain all right, title, and interest in everything you submit. Using this service transfers nothing to us and grants us no rights beyond producing the analysis you asked for.

Something here unclear, or contradicted by what you have seen? Tell us — we would rather correct it than have it relied on.