Security
Built for confidential documents
Contracts carry your clients' most sensitive terms. TermOwl is designed to keep as little as possible, for as short as possible, and to make every output easy to verify.
Nothing stored
Documents, reports, emails and questions are processed in memory and never written to a database or file storage.
Encrypted in transit
All traffic between your browser, our servers and the Claude API uses TLS (HTTPS).
No training on your data
Documents are analysed through the Claude API. Under Anthropic's commercial terms, API inputs and outputs aren't used to train models.
Professional in the loop
TermOwl is built for legal professionals. Every review requires confirming that a qualified professional will check the output before it's relied on or shared.
Verifiable output
Every issue quotes the clause it relies on, and TermOwl automatically checks each quote against your document's text.
Clear AI disclosure
Every session starts with a notice that results are generated by AI (Claude, by Anthropic) and are drafts, not legal advice.
How a review flows
- 1
Upload
Your browser sends the document over HTTPS to our API, hosted on Vercel.
- 2
Analysis
Our API forwards the document to the Claude API (Anthropic) together with fixed review instructions.
- 3
Verification
The report is validated against a strict schema and each quote is matched against the document text, in memory.
- 4
Delivery
The report streams back to your browser. When the request ends, nothing about the document remains on our side.
Retention
- • TermOwl keeps no copies of documents or reports.
- • Request logs contain metadata (time, route, status) and error messages, not document contents.
- • Anthropic may retain API data for a limited period for trust and safety under its own data retention policy.
- • IP addresses are used in memory for rate limiting during the free beta.
AI safety
- • Uploaded documents are treated as untrusted input; instructions inside them are ignored.
- • Output is constrained to a fixed schema, so reports are complete and consistent.
- • We follow Anthropic's Usage Policy for legal use cases: professional review and AI disclosure.
- • TermOwl is for users 18 and over.
Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Anthropic PBC | AI processing (Claude API) | United States |
| Vercel Inc. | Hosting and serverless compute | United States |
| Google LLC | Company email and waitlist (Google Workspace) | Global |
Questions or a security report?
Email hello@termowl.com with the subject “Security”. Data processing agreements are available for Team customers on request. See also our Privacy Policy.