First Rule

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Role-based access lets you decide who can upload, review, and share — keeping sensitive contracts in the right hands.Reviewed 2026-11-06View source

Proficient and Mastery tiers add role-based access controls, project-based organization, and shareable handoff summaries so field teams and legal get the right context without exposing everything.Reviewed 2026-11-06View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

Before relying on it
Verify administrative and data-access events, retention and export.

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.