How Adira protects your contracts

Adira handles some of the most sensitive documents a business has: its contracts. We treat that responsibility as central to the product, not an afterthought. This page sets out, in plain terms, the controls that protect your data and the commitments we make about how it is used. Where a control is available only on Enterprise plans, we say so.

Your data is encrypted both while it moves and while it is stored:

• In transit. All traffic between your browser and Adira is encrypted over TLS.
• At rest. Contracts and account data are encrypted at rest in our infrastructure.

Access to your workspace is governed by role-based access control (RBAC): each member sees and does only what their role permits. Enterprise organizations can add single sign-on via SSO/SAML so access follows your own identity provider and offboarding.

For organizations that need a governed trail and control over where data lives:

• Audit logs. Enterprise plans record an audit trail of activity in the workspace.
• Data residency. Enterprise plans can pin where your data is processed and stored.
• Retention. Retention periods can be configured to your policy on Enterprise plans; you can export or delete your data.

We do not train AI models on your contract corpus. Your contracts are used to serve you — to draft, review, redline, and track your own documents — and are not used to train shared or foundation models. Your confidential text stays yours.

We believe in being straight about where we are. Adira has not yet completed formal third-party certification such as SOC 2 or ISO 27001. We will state any certification — with its scope and date — on this page only once it is actually held, and never before.

Enterprise buyers evaluating Adira can request our current security documentation and roadmap; we are happy to walk through our controls in detail.

Found something?

If you believe you have found a security issue, please contact us at support@adiralaw.com so we can look into it promptly. We appreciate responsible disclosure.