Legal teams keep a company's most sensitive documents. Kontrakly is built so that access follows your identity provider, every action is recorded, and your data stays in Indonesia.
Identity and access
- Single sign-on with Microsoft Entra ID, Google Workspace, Okta or any SAML 2.0 / OIDC provider; owners can require SSO for the workspace domain.
- SCIM provisioning keeps users and groups in sync, so leavers lose access the moment IT disables them.
- Seven built-in roles map to a clear permission matrix; external counsel see only the matters they are invited to.
Data protection
- Data is stored in Tencent Cloud's Jakarta region.
- Files are encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Each customer workspace is isolated at the database layer; every query is scoped to its workspace.
The AI assistant
- Reads only the documents the person asking may open.
- Cites every answer, so sources can be checked.
- Can only create drafts marked as AI drafts — never approve, send or sign.
- Your documents are never used to train models.
Audit and retention
Every view, edit, download and assistant request is written to an append-only, hash-chained audit log that you can export. Audit logs are kept for seven years by default.
Reporting a vulnerability
Write to security@kontrakly.example. We acknowledge reports within one business day.