- Home
- Security & privacy
Your contract is processed for the active review and is not stored.
DueFrame is designed to record review decisions without becoming a contract repository. The product retains workspace and review metadata only after the user confirms what to save.
Transient document processing
The Word add-in reads the active document or highlighted text when the user requests a review. Contract content may be processed transiently for that request, but DueFrame does not retain the contract file, full text, clause excerpts, redlines or full comments.
AI-assisted review
When AI-assisted review is enabled, the text submitted for a review or question is sent to OpenAI's API to generate that response, in addition to being processed on DueFrame's own servers. OpenAI does not train its models on API content. This does not change what DueFrame retains: nothing about the request is stored by DueFrame once the response is returned. How the AI works, its limits and the human-oversight design are described on the AI transparency page.
Metadata retained after confirmation
DueFrame can save:
- Review records, including counts and a safe Review summary;
- safe descriptions of Applied, Dismissed and Unresolved suggestions;
- structured risks selected by the user;
- structured reminders selected or created by the user;
- workspace, team and role information needed for access control;
- playbooks and clause-library entries your team authors deliberately (your standard positions and precedent wording - never populated from reviewed documents; clauses can also be imported from a precedent you upload for that purpose, with each clause individually approved and labelled with its source file);
- company profiles and personalisation settings you author deliberately (who you act for, response style, tone and your standing instructions - never populated from reviewed documents);
- with position history switched on (see below), the structured positions of each reviewed document.
Position history - optional, off by default
A workspace admin can switch on position history, which lets DueFrame compare each contract you review against your own past agreements - “this liability cap is lower than 30 of your last 40 supplier agreements”. To do that, DueFrame keeps, for each reviewed document, a fixed list of positions as structured values (for example liability cap: 12 months of fees; cure period: 30 days; governing law: England and Wales; renewal: automatic), together with the contract type, the side you represented and a one-way fingerprint used only to avoid counting the same document twice.
It does not keep the contract text, any clause wording, party names or the file - the fingerprint cannot be reversed into text. Positions are kept inside your workspace only and are never pooled with, or shown to, any other customer. The feature is off unless an admin turns it on in Settings, and the retained positions can be exported or deleted at any time from the same place. Comparisons are computed arithmetically from the recorded values; none of them is an AI opinion.
Bundles and connected document sources
Bundle reviews several documents together (a master agreement and its order forms, a contract and its amendments). The documents are read for that request, the findings are shown in the add-in, and nothing is stored - exactly as for a single-document review.
You can attach documents from Microsoft 365 (OneDrive, SharePoint, Outlook attachments) by connecting your own Microsoft account. DueFrame reads the file for the action you asked for, extracts its text in memory and discards it. It keeps the encrypted connection tokens so you do not have to reconnect, and nothing about the files themselves. Other document systems (iManage, NetDocuments) are not connected; they would follow the same read-only, no-copy rule.
Workspace access controls
Workspace access is controlled through authentication, organisation membership and role checks. Sign in with email and password, Google, Microsoft, or your organisation's single sign-on (SAML 2.0) where it has been set up for your email domain. Optional two-factor authentication is available in Settings. DueFrame is not a law firm and does not provide legal advice.