← Senedra Security & data

Your contract is yours.

A subcontract is sensitive. Here is exactly how we handle it — in plain terms, and honest about where we are as an early-stage service.

Your contract stays private

We never train any model on your contract or its contents. Your documents are used only to produce your registers, and for nothing else.

Encrypted in transit and at rest

Traffic is served over TLS. Documents and generated registers are stored encrypted at rest by our hosting providers.

UK / EU data region

Contract data is processed and stored in UK/EU regions. We do not move your documents outside that footprint without telling you.

Redact before you send

For a diagnostic you can send a real or anonymised contract — we ask you to redact names and commercially sensitive figures first, and we tell you exactly what we need.

Deletion on request

You can ask us to delete your documents and registers at any time; the specifics are set out in the engagement letter you sign, not left to chance.

Human-reviewed output

Every register is checked by a person before it reaches you. The output is a source-grounded starting point for your commercial team — not a determination of anything.

Who else touches your data

The short list of services we rely on, and exactly what each one sees. Your uploaded contracts are not shared with any of the website tools below.

Cloudflare PagesHosts the public website (this site). No contract data.
Web3FormsDelivers the demo enquiry form to our inbox. Only what you type into that form.
Cal.com (EU)Schedules demo calls. Only the details you enter when booking a time.
Email providerWe correspond with you by email during a pilot.

Where we are honestly

Senedra is an early-stage service. We do not yet hold SOC 2 or ISO 27001 certification — those are on the roadmap, and we will say so plainly here when they land rather than implying them now. What we do today is the list above, and we will not claim more than that.

Questions about data handling? Get in touch. For what the website itself collects, see the privacy notice; for what the output is and isn’t, see the terms.