Data processing
CounterPart processes uploaded documents on behalf of your organization as data processor. This page summarises the processing terms and lists current sub-processors.
Subject matter
Processing of reference packs, response packs and reviewer activity to produce requirement-level analyses, negotiation checklists and signed decision records.
Nature and purpose
- Text extraction and semantic chunking of uploaded documents.
- Retrieval-augmented analysis by specialist agents (SLA, DPA, InfoSec, Pricing, Notice).
- Storage of findings, reviewer overrides, negotiation items and signed decisions.
Categories of data subjects
Reviewers, approvers and any individuals named in uploaded documents.
Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Self-hosted PostgreSQL | Database and sessions | Customer-controlled |
| MinIO / S3-compatible storage | Document storage | Customer-controlled |
| OpenAI-compatible LLM API | LLM inference for agent analysis | Per provider configuration |
International transfers
Where a sub-processor operates outside the EEA, transfers rely on Standard Contractual Clauses and additional safeguards documented with each provider.
Security measures
See the Security overview.
Data subject requests
Requests are handled by the privacy contact configured for this instance. Reviewers can also self-serve data export and deletion from Settings → Privacy & Data.
This page is maintained by the operator of this instance. It describes current practices for this CounterPart instance and is not an independent certification.