Skip to content

AI Assistant and Privacy

← Security and Privacy

Overview


The ContractZen AI Assistant is powered by Microsoft Azure OpenAI Service, an enterprise service that provides OpenAI language models within Microsoft’s Azure cloud environment.

ContractZen does not use the consumer ChatGPT service or the public OpenAI API.

Data Processing


When you use the AI Assistant:
  • Your prompt and relevant document(s) content are securely transmitted to Microsoft Azure OpenAI Service for processing
  • The service generates a response and returns it to ContractZen
  • Data is transmitted over encrypted connections
Only the information necessary to produce the requested response is processed.

Use of Customer Data


Microsoft’s documentation for Azure OpenAI Service clarifies that any data (input or output) is:
  • NOT used to train any generative AI foundation models
  • NOT available to other customers
  • NOT available to OpenAI or other Azure Direct Model providers
  • NOT used to improve Microsoft or third-party products or services
Microsoft may temporarily retain prompts and responses for abuse monitoring and service protection purposes.

For official details, see Microsoft documentation: 

Storage of Customer Files


Documents stored in ContractZen are hosted in Microsoft Azure Storage located in the European Union.

Data is protected using enterprise-grade security measures, including:
  • Encryption at rest using AES-256
  • Encryption before upload using customer-specific encryption keys
  • Secure key management using Azure Key Vault
Customer documents remain within ContractZen’s secure storage environment.

For more information about ContractZen’s security controls and data protection practices, see:
https://contractzen.uservoice.com/knowledgebase/articles/902409.

Geographic Location of Data


ContractZen operates on Microsoft Azure infrastructure located in the European Union. Customer data stored in ContractZen remains within EU-based Azure data centers according to the service configuration.

GDPR Roles


For personal data processed through the service:
  • Customer organization acts as Data Controller
  • ContractZen acts as Data Processor
  • Microsoft (Azure) acts as Sub-processor
Processing is governed by applicable data protection agreements and service terms.

Accuracy and Professional Use


The AI Assistant generates responses based on patterns in training data and the information provided in your request. Responses may be incomplete, outdated, or inaccurate.

ContractZen does not guarantee the accuracy, reliability, or suitability of AI-generated content for any specific purpose. Use of the AI Assistant and reliance on its output is at your own discretion and risk.

The AI Assistant is intended as a support tool and does not replace professional advice, judgment, or review. For matters requiring specialized expertise — such as legal, financial, or regulatory decisions — qualified professionals should always be consulted.

Use of the AI Assistant is subject to ContractZen’s applicable service terms.

Customer Control


Use of the AI Assistant is optional and subject to the customer organization’s own policies and decisions.

Feedback and Knowledge Base

(thinking…)