Data processing agreement
LAST UPDATED 2026-10-01
This agreement forms part of the terms of service where the GDPR or a comparable law applies to your use of Legalnaut. You are the controller; A2Z WEB PTE. LTD. is the processor.
1. Subject matter
Processing of personal data contained in documents you import into a matter, for the purpose of providing the service, for as long as your subscription runs.
2. Categories of data and data subjects
Whatever your case material contains. In litigation that routinely includes names, contact details, employment details, financial information and correspondence, and may include special categories of data. Data subjects are the parties, witnesses and third parties appearing in your documents.
3. Our obligations
We process personal data only on your documented instructions, keep it confidential, apply the security measures described on the security page, assist you with data subject requests, and notify you without undue delay of any personal data breach affecting your material.
4. Sub-processors
You authorise the sub-processors listed in the privacy policy. We give notice before adding a new one, and you may object.
5. International transfers
Transfers outside the EEA are made under Standard Contractual Clauses. On the Enterprise plan the application can run on your own servers, in the region you choose, and no transfer of case material takes place. Executed processing agreements are in place with every model provider, each prohibiting the use of customer content for training.
6. Deletion and return
On termination you may export your material. We delete it on your written request, after the grace period described on the security page. The only deletion we schedule ourselves is of a trial matter that ended and was never used, with notice and the same grace period.
7. Audit
We make available the information needed to demonstrate compliance, including our SOC 2 Type II report under NDA, the ISO/IEC 27001:2022 certificate of the data-centre operator, the BSI C5 Type 2 attestation of Hetzner Cloud and the SOC reports of Amazon Web Services, on request.