Security

Data that stays in the region

Clause360 runs on servers in Riyadh, Saudi Arabia. Larger customers can choose their own servers.

Two-step sign-in for everyone

Every person signs in with a password and a code from an authenticator app. Company sign-in with Microsoft Entra ID, Okta or Google is available on every plan.

Every workspace sealed off

Each organisation's data is kept apart by the database itself, not just by the application.

A record that cannot be quietly rewritten

Every action is logged and exported daily as a tamper-evident hash chain, which can also be timestamped by an independent authority.

Signed documents anyone can verify

Every signed PDF carries a certificate, and anyone can check online that it has not been changed since signing.

AI under your control

Names and personal details are removed before text is sent for AI analysis, and admins can switch external AI off entirely.