TODO.LAW

Cloud, your own hardware, or managed by us.

The suite (DPO Central, Dealroom, AI Sentinel) shares one login. Donna and LQ.AI come from the community we contribute to.

TODO.LAW cloudHosted by us, with processors bound by full safeguards. Start free, and move your program to another environment or platform whenever you like.Managed instanceAn isolated instance we run for you from Asturias, Spain, with open LLMs available and a tailored SLA.Your own hardwareOn your own servers, with our on-site or remote help, open source code and a wide range of optional modules.

Not sure which to choose?

Answer six short questions about the safeguards you need, and we show which way meets them.

TODO.LAW cloud

Hosted by us: a free, capped pilot for up to five organizations, 15 days of edits, then read-only with export, with record ceilings

Sub-processors and safeguards

Vercel, Neon, Resend, Stripe, Google Workspace and, only when AI features are switched on, the AI gateway OpenRouter.

See the full list of sub-processors
  • Vercel
    Purpose
    Hosting platform (application and server functions)
    Location
    Frankfurt, EU (fra1 region), all three
    Certifications
    SOC 2 Type II, ISO 27001
  • Neon, LLC (part of the Databricks group; the data processing addendum of Databricks, Inc. applies)
    Purpose
    Database provider
    Location
    Frankfurt, EU (eu-central-1), all three
    Certifications
    SOC 2 Type II, ISO 27001, ISO 27701
  • Resend
    Purpose
    E-mail provider: sign-in links and notices and, with the rights-request module, rights-request notices to requesters (name, e-mail, reference, staff message text). It keeps copies of the e-mails and their delivery logs for up to thirty (30) days
    Location
    United States
    Certifications
    SOC 2 Type II
  • Google LLC (Google Workspace)
    Purpose
    E-mail service of our support and privacy addresses: receives the messages you and your users send us (support requests, rights requests, notices under this agreement) and our replies
    Location
    United States and other countries
    Certifications
    SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001
  • Stripe (RINDOGATAN LLC's account)
    Purpose
    Payment processor (Plan billing)
    Location
    United States and other countries
    Certifications
    PCI DSS Level 1, SOC 2 Type II
  • OpenRouter, Inc.
    Purpose
    AI gateway and model provider: produces the drafts your users ask for from the details of the record being drafted, routing each request to the model chosen (only when AI features are switched on by the administrator). Its own sub-processors include large cloud and model providers that process the requests
    Location
    United States
    Certifications
    SOC 2 Type II
  • Sealmetrics
    Purpose
    Web analytics: counts visits to VendorWatch pages without setting cookies; receives the IP address of each page request, and we use only aggregated figures
    Location
    Ireland and France, EU

See pricing →

Managed instance

Isolated instance we run for you: all tools, VendorWatch unlimited, spec-gated

Sub-processors and safeguards

On Empathy.ai (Asturias, Spain) infrastructure, ISO 27001-certified, under a custom SLA that can incorporate additional certifications, physical inspection or audits, and custom safeguards.

Get a quotation →

Your own hardware

On your own servers, with our on-site or remote help, open source code and a wide range of optional modules.

Sub-processors and safeguards

You are in full control.

Get a quotation →