Sub-processor Notice (Amazon Bedrock) Answers to Frequently Asked Questions (“FAQs”)

Updated on: December 18, 2024

This document addresses common questions that may arise with respect to the sub-processor notification distributed by ContractSafe on December 18, 2024, relating to ContractSafe’s use of Amazon Web Services (AWS) Bedrock for AI. This document is provided for informational purposes only, and does not form a part of any agreement for ContractSafe’s services between ContractSafe and its customers.

  1. Does this notice apply to my organization? The new sub-processor notice applies to all customers that currently or in the future use features that ContractSafe provides utilizing Amazon Bedrock. Once these features are enabled (whether by your account Admin or by ContractSafe), Amazon Bedrock will be considered a sub-processor of your company’s personal data. 
  2. What ContractSafe customer data will be transferred to Amazon Bedrock? ContractSafe’s AI features involve the processing of contracts and associated data, which may contain personal data related to your contracts and users. In the future, ContractSafe may develop new generative AI product features utilizing Amazon Bedrock’s services, as identified within ContractSafe’s online product documentation and/or sub-processor list. If you elect to use any existing or new generative AI product features, the feature’s functionality and your specific use case(s) will determine the scope of data transferred to Amazon Bedrock. 
  3. How do I disable ContractSafe AI features? Instructions for enabling and disabling ContractSafe AI features can be found in our Help Center.
  4. What will Amazon Bedrock do with my company’s data? Amazon Bedrock doesn't store or log prompts and completions. Amazon Bedrock doesn't use your prompts and completions to train any AWS models and doesn't distribute them to third parties. For more information about how Amazon Bedrock protects customer data, refer to this AWS article on data protection.
  5. Will Amazon Bedrock store my company’s data? No, Amazon Bedrock doesn't store or log prompts and completions.
  6. Does ContractSafe have a data protection agreement and cross border personal data transfer mechanism in place with Amazon Bedrock? Yes, ContractSafe’s agreement with AWS includes the AWS Data Processing Addendum. Please note that all agreements governing ContractSafe’s use of Amazon Bedrock are between ContractSafe and AWS, and you do not need to enter into a separate agreement directly with AWS in order to use ContractSafe features utilizing Amazon Bedrock.
  7. What is AWS' address? 410 Terry Ave. N., Seattle, WA 98109-5210
  8. Where does ContractSafe publish its list of sub-processors? A complete list of ContractSafe's sub-processors is published publicly here