Security and data

Your agreements are your business.

Statements of work and client emails are commercially sensitive. Here is where they live, who can reach them, and what the model is and isn’t allowed to do with them.

Where your data lives

Sydney first. Disclosed when it isn’t.

Application and database: AWS, Sydney (ap-southeast-2). Encrypted managed PostgreSQL.
Agreements and files: Private object storage in Sydney. Downloads are checked against your access each time.
Email intake and alerts: AWS email services. Alerts carry a short summary and a link, never the client’s full email.
Analysis: Anthropic’s Claude API. Text sent for analysis is processed outside Australia.
Payments: Stripe. Agreeably never sees or stores your card number.
Sign-in: Auth0. Agreeably never stores your password.

Controls

Designed in, not bolted on.

Isolation by default

Every record belongs to one workspace, and every query is filtered by it.
On Team, members see only projects they are assigned to; removing someone removes their access.
Tests check that one workspace cannot read or change another’s data, project by project.

The model is kept on a short leash

Agreements and emails are treated as data, never as instructions.
Output is structured and checked; quotations must match your stored text exactly.
Sending email, billing and changing scope sit outside anything the model can trigger.

Email that cannot be spoofed in

Only mail forwarded by a workspace member with project access is accepted.
Aligned SPF or DKIM with DMARC passing is required; a From header is not enough.
Signatures on provider notifications are verified, deliveries are de-duplicated and intake is rate-limited.

A client portal that shows one document

On Business and Team, a shared change request opens through a link with a random code. Codes and session tokens are stored only as hashes.
Email verification codes expire after 10 minutes and allow 5 attempts. The session cookie is HttpOnly and lasts at most 12 hours.
Visitors see the client document only, never internal notes, AI analysis, decisions or agreement text. You can revoke a link at any time.
Visitor names and emails are exported and deleted with the project.

A record that is not rewritten

Confirmed scope, assessments, decisions and approvals are append-only.
Security-relevant actions are audited without copying document text into logs.
Agreement, request and email bodies are kept out of routine logs and error reports.

Quotations verified, not generated

Evidence is shown only when the exact words exist in your agreement. Anything else is flagged for a person to review.
Hosted in Sydney

Application, database and files run on AWS in ap-southeast-2. Analysis by Anthropic happens outside Australia, and we tell you so.
Workspaces kept apart

Every read and write is checked against your workspace. On Team, members see only the projects they are assigned to.
The model cannot act

Instructions inside an agreement or email are treated as data. Sending email, billing and anything that changes state stay outside the model’s reach.
History that does not get rewritten

Confirmed scope versions, assessments and decisions are append-only. A change adds a new entry; the old one stays.
Your data, exportable

Export a readable bundle of a project at any time. A lapsed workspace stays readable and exportable before it is deleted.

FAQ

Security questions

Where is Agreeably hosted?

On AWS in Sydney, Australia (ap-southeast-2): the application, database, files and email processing. The one supplier outside AWS is Anthropic, whose Claude API performs the analysis outside Australia.

Is my data used to train AI models?

Agreeably uses Anthropic’s commercial API, not a consumer chat product. Anthropic’s data retention and training terms for that API are disclosed in our data policy before you upload live documents.

Can my client see anything in Agreeably?

Only what you share in the client approval portal on Business or Team: one sent change request, as a client document with your branding, and its PDF. Clients have no Agreeably account and never see internal notes, AI analysis, decisions or agreement text. Otherwise alerts go only to members of your workspace, and change requests are PDFs you send yourself.

Can I export or delete our data?

Owners can export a readable bundle of project sources, scope versions, requests, assessments, decisions and approval evidence at any time, and can request deletion of a project or the whole workspace, with a confirmation screen showing what will be removed.

What happens to our data if we stop paying?

The workspace becomes read-only but stays readable and exportable. It is deleted 30 days after an unconverted trial or 90 days after a lapsed subscription, with warnings first.

Check your next request against the agreement.

Upload one agreement and paste the last request that made you wince. See what it says in a few minutes.

Email us for early access Compare plans

No card needed · Cancel any time · A$ pricing