Product security
- Situational Awareness For Incidents
- Audit Logging
- Single Sign On
Closact's Trust Center
At Closact, security is not a feature; it is the foundation of how we build software for Canadian legal teams. We treat the documents entrusted to us, whether from clients, their counterparties, or anyone who interacts with our platform, with the privilege and care those records deserve.
Welcome to our Trust Center
A single place to understand how Closact protects the documents and data Canadian legal teams entrust to us. Here you will find our compliance posture, the subprocessors we rely on, the controls we operate day to day, and answers to the questions diligence teams ask most often. Everything is kept current as our program evolves.
Compliance
SOC 2 Type I
Completed. Independent examination by Prescient Assurance, with compliance automation and evidence collection by Secureframe.
PIPEDA
Canadian privacy law aligned
SOC 2 Type I examination completed. Thank you to Prescient Assurance and Secureframe.
Subprocessors
- Canada (ca-west-1)
Amazon Web Services·Application hosting, database, file storage, backups, emailServices: RDS, S3, SES, KMS, SSM, CloudWatch
aws.amazon.com/ - US / Global
Google (Gemini)·AI extraction of document terms (sole AI provider)Services: Gemini API (Vertex AI)
cloud.google.com/vertex-ai - US / Global
Google Workspace·Corporate email, calendar, and document collaborationServices: Workspace
workspace.google.com/ - US
GitHub·Source code hosting and change managementServices: Repositories, CI
github.com/
Controls
Data security
- Inventory of Infrastructure Assets
- Data Backups
- Testing for Reliability and Integrity
Network security
- Limit Network Connections
- Transmission Confidentiality
- Anomalous Behavior
App security
- Conspicuous Link To Privacy Notice
- Secure System Modification
- Login Sessions
Endpoint security
- Endpoint Security Validation
- Disk Encryption
- Threat Detection
Corporate security
- Roles & Responsibilities
- Competency Screening
- Personnel Screening
Have a security question?
Send us your security questionnaire, vendor risk assessment, or specific control inquiries. We respond within 48 hours.