Trust schedule
How we look after the contracts you trust us with
Written like the schedule you would attach to an agreement, because that is what your procurement team will ask for anyway.
Version 4, effective 1 February 2027
The schedule
1. Where your data lives
1.1Hosting
Contracts, comments and playbooks are stored in two data centres in England. Backups stay in the UK and are encrypted separately.
1.2Encryption
TLS 1.3 in transit. AES-256 at rest, with keys held in a managed key service and rotated every 90 days.
1.3Model use
Your documents are never used to train any model, ours or anyone else’s. Processing happens inside our UK environment.
2. Who can see what
2.1Your team
Permissions per workspace and per matter. Single sign-on and enforced two-step sign-in on Review and Counsel.
2.2Our staff
Nobody at Docket can open a contract unless you grant time-limited access from a support request. Every grant is logged and shown to you.
Audit log · Brantwick Freight MSA
12 Jan 2027 14:32M. Quinnapproved clause 9
12 Jan 2027 14:29Docketinserted 9.2
12 Jan 2027 14:29Docketstruck 9.3
11 Jan 2027 09:05Support (S. Odum)access granted for 2 hours by M. Quinn
3. How long we keep it
3.1You choose
Set retention per workspace or per matter. When the period ends, the contract and every version are deleted from live systems and from backups within 35 days.
| What | Default | Your options |
|---|---|---|
| Signed contracts | 7 years | On signature to never |
| Drafts and versions | 12 months | 30 days to 7 years |
| Audit log | 7 years | Fixed |
| Closed accounts | 30 days | Fixed |
4. Who helps us run Docket
4.1Sub-processors
We tell you 30 days before adding one. Each has a written processing agreement with us.
| Company | What for | Where |
|---|---|---|
| Kestwood Cloud | Hosting and backups | England |
| Pellmark Mail | Notification emails | Ireland |
| Fellgate Desk | Support tickets (no documents) | England |
5. Reporting a security issue
5.1Tell us
Email security@example.com. We reply within one working day and will not take action against good-faith research.
5.2Independent testing
An outside firm tests the product every year. The next test is booked for March 2027; the summary report is available under NDA.
Need our security pack for procurement?
We send the questionnaire answers, the processing agreement and the latest test summary, usually the same day.