ContractSpec
DocsPricingSecurity / Trust
ENFRES
Start freeSign in

ContractSpec

Turn meetings and product signals into approved work with visible review, approvals, and exports that fit your existing stack.

© 2026 ContractSpec Studio.

Product

OverviewMeeting-to-ExecutionPublic SignalsMission ControlIntegrations

Resources

Expansion PathWhy Fragmented Tools Break Operators

Company

DocsPricingSecurity / TrustWatch 90-sec demo

Legal

TermsPrivacyDPA

Contact

hello@contractspec.studioLinkedInSign in
© 2026 ContractSpec Studio. All rights reserved.
ENFRES
TermsPrivacyDPA

Effective: February 12, 2026

Data Processing Agreement

Chaman Ventures, SAS au capital de 100 € RCS Paris 989 498 902 — TVA FR92989498902 229 Rue Saint-Honoré, 75001 Paris, France

1. Roles

You (the Customer) are the data Controller. Chaman Ventures, SAS, registered at 229 Rue Saint-Honore, 75001 Paris, France (RCS Paris 989 498 902, TVA FR92989498902) acts as the data Processor. Where you connect third-party integrations, those providers act as sub-processors under this agreement.

2. Scope of processing

We process personal data solely to provide the ContractSpec Studio service: feedback ingestion, correlation, impact analysis, deliverable generation, work item export, and stakeholder notifications. Processing is performed on documented instructions from you.

3. Data residency

Primary database resides in the EU (eu-west-1) via Supabase. Analytics data is processed in the EU via PostHog. LLM inference may route through US-based providers; EU-only inference is available via Mistral AI. Enterprise plans support single-tenant or on-premises deployment for full data sovereignty.

Platform-level sub-processors

Active for all customers as part of normal operations.

ProviderPurposeData processedRegion
VercelHosting, serverless functionsHTTP requests, page viewsConfigurable
SupabaseManaged PostgreSQL databaseAll persistent application dataEU (eu-west-1)
PostHogProduct analytics, feature flagsUser behavior events, feature flag evaluationsEU

User-configurable sub-processors

Only active when explicitly connected by you through integrations settings.

ProviderPurposeData processed when connected
SlackThread import, brief postingMessages, thread content
GitHubCodebase analysis, PR ingestionRepository content, pull request data
JiraIssue exportWork items, project data
Terms of ServicePrivacy PolicySecurity