Your contracts are safe here.
Simple answers to the questions agencies ask us before they upload their first contract.
AI training
Your contracts never train AI models
When Greenlit reads your document, the text goes to our AI provider (Anthropic) under a commercial agreement that forbids using your data to train AI. We keep a note of what each analysis cost and how long it took — never the contract itself.
Your documents live in exactly two places: your workspace's storage, and the analysis saved to your workspace. Nowhere else.
Workspace isolation
Only your workspace can see your data
Everything you upload belongs to your workspace, and only your workspace. The database itself refuses to show one company's data to another — a protection that holds even if there's a bug in our app.
We test this regularly: accounts in one workspace try to open another workspace's contracts and files, and the database turns them away every time.
Encryption
Everything is encrypted
Everything travels over encrypted connections (TLS), and everything we store is encrypted at rest by our infrastructure providers (Supabase on AWS).
Retention
What we keep, and for how long
We keep your contracts and analyses for as long as your account is active — the history is the point. It's the record you reach for when a dispute comes up months later.
If you delete your account, your data is removed from our systems. Copies inside encrypted backups expire on the normal backup schedule.
DPDPA
India's data protection law
Greenlit is built in India and handles personal data under India's Digital Personal Data Protection Act, 2023. In plain terms: we only use your data for what you gave it to us for, signup is consent-based, and you can have your data erased, as described above.
Need a data-processing agreement or a security questionnaire filled in? Write to hello@getgreenlit.in — we respond quickly.
Access
Who can see your data
The people in your workspace — and no one else. Greenlit staff don't browse customer contracts, and we only touch production data to fix a problem, with your consent.
The one exception, by design: clearance records. Each is a public page at an unguessable web address showing the result, the date and a fingerprint of the content — never the content itself.