Terms is an independent, open-source project by Family Office, a design firm led by Diego Segura. We are always sending contracts back and forth with our clients, our freelance collaborators, and our lawyers. We built Terms to make that infinitely faster and easier.
Terms is, for now, an independent project. It has not been SOC 2 audited, and we make no claims about the complete and total security of the project. You can investigate the source code for yourself. Below is every technology we rely on and the precautions we take so that your contracts stay safe and secure.
| Area | What we do |
|---|---|
| Hosting | The app runs on Vercel and is served over HTTPS only. Nothing is exposed on plain HTTP. |
| Database | Contracts live in a Postgres database on Neon, encrypted at rest and reached over TLS. Preview and local builds use a separate branch, so production data never leaves production. |
| Access | Sign-in is handled by Clerk with one-time email codes; there are no passwords for us to store or leak. A contract link is an address, not a secret: opening it requires signing in with an email address the sender listed. Every read and write is scoped to the account that owns the contract at the type level, so another tenant's contract reports as if it does not exist. |
| Signing | A signature records the typed name, consent, IP address, browser, and a SHA-256 hash of the exact text signed. When the last party signs, the document locks on the server and a certificate of completion records the audit trail. |
| AI drafting | Document text is sent to Anthropic's API only when you use the drafting panel, and only for that contract. Attached PDFs are deleted from Anthropic's side after 24 hours. Nothing else in the app transmits document contents. |
| Notifications go through Resend and carry the contract's title, the parties' names, and a link. The body of a contract is never emailed. | |
| Payments | Subscriptions are handled by Stripe. Card details go to Stripe directly and never touch our servers. |