Security and data handling

How Contract Analyzer Handles Your Contract Data

Last reviewed: July 11, 2026

Contract Analyzer extracts text from uploaded PDF and DOCX files for AI analysis. Current local storage does not write uploaded file bytes to permanent storage. Up to 12,000 characters of extracted text are sent to the configured external AI provider, then stored with the analysis in your account until you delete the contract.

What is sent for analysis

  • The service extracts text from the PDF or DOCX you upload.
  • Only the first 12,000 characters of extracted text are used and stored.
  • That extracted text is sent to the external AI provider configured for the service so it can generate the risk, clause, and recommendation output.
  • Provider-side handling depends on that provider's terms and configuration. Contract Analyzer does not promise provider-side zero retention.

What is stored and deleted

Stored

The current LocalFileStorage implementation does not write uploaded file bytes to permanent storage. The application database stores up to 12,000 characters of extracted text and the resulting analysis under your account.

Deleted by you

The database record remains until you delete the contract from My Contracts. That action removes the stored contract text and its related analyses from the application database.

Controls and limitations

  • Contract records are tied to the signed-in account that created them.
  • You control record deletion through My Contracts.
  • Do not upload a document unless you are authorized to send it for external AI processing.
  • AI output may omit, misunderstand, or invent details. Verify important findings against the original contract.
  • Contract Analyzer is not a law firm and does not provide legal advice. Consult a qualified attorney for legal decisions.

For the full policy, read our Privacy Policy.

Independent guidance

These independent sources provide general AI-risk and professional-responsibility guidance. They do not certify or endorse Contract Analyzer.

Security and data FAQ

Are uploaded contract files permanently stored?

With the current LocalFileStorage implementation, uploaded file bytes are processed in memory and are not written to permanent file storage. The extracted text and analysis are stored separately in the application database.

What contract data is sent to the AI provider?

Contract Analyzer sends up to 12,000 characters of text extracted from the uploaded contract to the external AI provider configured for the service. The provider uses that text to generate the analysis.

How long are the extracted text and analysis stored?

The extracted text and analysis remain in your account until you delete the contract record from My Contracts. Deleting the record removes the contract text and its related analyses from the application database.

Does Contract Analyzer guarantee accurate legal conclusions?

No. AI output can be incomplete, incorrect, or miss context. Contract Analyzer is a review aid, not legal advice, and important findings should be checked against the original contract and reviewed by a qualified attorney when appropriate.

Review the details before you upload

Read the privacy policy, check common questions, and only upload documents you are authorized to send to the configured AI provider.