CuratedAI uses criteria developed by experts in data protection law. They are based on regulatory requirements (e.g., Article 28 GDPR for DPAs) and practical experience when it comes to common contractual terms negotiated in favor of either party (e.g., audit, liability, notification periods).

Currently, CuratedAI supports data processing agreements (DPA) and privacy notices (website, employees) reviews. For DPAs, there are three main review options: general (mandatory Article 28 GDPR requirements), processor- or controller-friendly. We're working on expanding the supported documents to cookie policies, NDAs, and terms of service soon. Stay tuned!

Yes, flexibility and transparency are at the core of our product. We know every lawyer (and company) has their own style and requirements. That's why we're giving you full flexibility as to which criteria you want to use, how important you consider them, adding new criteria, and giving example clauses. You can take advantage of all these features with your premium subscription.

CuratedAI ensures the security and privacy of your data by processing and storing all information within the EU, using AWS in Frankfurt for storage and Azure in France for running our AI models. We use Azure’s OpenAI Service, ensuring your data is never shared with OpenAI or used to train their models. Documents are automatically deleted after 48 hours unless you request otherwise. For paid services, none of your data is used to train our models. We also apply strong encryption (AES-256) and offer segregated environments for enterprise clients to ensure data separation and protection. For more information see our dedicated Security page, or contact us at founders@curatedai.eu.