Deployment & Security
Your contracts. Your infrastructure. Your rules.
Run contractLoop as a managed EU cloud service or fully on-premise. Either way, with enterprise-grade security.
Managed Cloud
We run contractLoop for you in EU data centres and take care of updates and monitoring. No operations work for your team.
- EU data residency
- Updates handled by us
- Operations and monitoring included
On-Premise
Deploy inside your own data center or private cloud. Your contracts never leave your infrastructure — ideal for regulated industries and strict data-protection requirements.
- Full data sovereignty
- SSO via OIDC and SAML
- Can run without internet access
Security for critical processes
Encryption and keys
Documents are encrypted with their own keys, which are kept in a separate vault. Internal services talk to each other over mutually authenticated TLS.
Data protection & PII
Personal data fields are classified and masked by role. Documents can be erased cryptographically and irreversibly by destroying their keys, and GDPR Art. 15 access requests go through a dedicated data protection gate.
Tamper-proof audit trail
Every event goes into a cryptographically chained ledger, and read access is logged too. Documents are stored immutably in WORM storage.
Roles and tenant isolation
Every tenant has its own database and its own identity realm. Role-based permissions, segregation of duties and the four-eyes principle are enforced.
Single sign-on
Sign in with Microsoft Entra ID, Google Workspace, AWS, Okta or any OIDC and SAML 2.0 provider. App roles are pushed to the IdP, groups and hierarchies are pulled back.
On-premise and offline
Every component is bundled and nothing is loaded from outside networks. Run it in your own data centre, even without internet access, AI models included.
Verified supply chain
Every release is pinned by checksum and ships with a software bill of materials. Known vulnerabilities are checked automatically before approval.