Security & compliance
Data residency
Where your data sits, and what crosses regional boundaries.
Primary region
The clmSpace backend runs in Azure UK South. Your data of record sits in the United Kingdom: the Dataverse environment and the SharePoint libraries in your own Microsoft tenant, the backend that processes them, and the operational logs.
The customer portal is delivered through Vercel’s London region, and the read model that powers fast lists and dashboards is a tenant-scoped replica of derived structured data held in Neon Postgres in AWS London, also in the United Kingdom. The one cross-border flow to note is AI inference, covered below.
What lives where
- Source contract documents stay in your own Microsoft 365 SharePoint. clmSpace reads them via Microsoft Graph and keeps no separate copy.
- Derived structured data sits in your tenant’s Dataverse environment in the United Kingdom.
- Read model for lists and dashboards: a tenant-scoped replica of derived structured data in Neon Postgres, AWS London (United Kingdom).
- Logs are held in UK South.
- AI inference runs on the Anthropic API. Text from your contracts is sent to Anthropic for inference. See Anthropic data handling.
Restricted transfers
Inference calls cross outside the UK and EEA to the United States. The IDTA in our DPA, referencing the EU SCCs, covers these restricted transfers, and Anthropic is approved under our sub-processor list. If your tenant has specific residency requirements, contact your account team to review them.