Data Processing Addendum (DPA)
Last updated: June 26, 2026
Version: 2026-06
This DPA summary describes the standard data-processing posture for law firms using EstateDraftFL and TrusteeClear. Counter-signable firm agreements may include additional or different terms.
1. Roles and scope
For firm client data, the law firm is generally the controller or business owner of the client relationship and LegalDraft Technologies LLC acts as processor or service provider for the purpose of operating EstateDraftFL and TrusteeClear. LegalDraft Technologies LLC is software infrastructure, not a law firm.
2. Data subjects and data categories
Data subjects may include firm personnel, clients, trustees, settlors, decedents, beneficiaries, fiduciaries, family members, professional advisors, and support contacts. Data may include contact details, account details, estate and trust information, probate details, documents, notes, generated drafts, audit events, and support communications.
3. Processing instructions
LegalDraft Technologies LLC processes firm data to provide, secure, support, and improve the platform; generate and review drafts; route workflows; maintain audit trails; and perform other services requested by the firm or required by the agreement.
4. Security measures
Security measures include Supabase Row-Level Security tenant isolation, encryption in transit, private document access patterns, server-only service-role credentials, audit logging, access controls, security headers, backups, and incident-response practices.
5. Subprocessors
Authorized subprocessors may include hosting, database, authentication, storage, AI, payment, email, analytics, monitoring, and support providers needed to operate the service. Current core providers include Vercel, Supabase, Anthropic, Stripe, Square, and transactional communication providers.
The maintained register — provider, function, the data that reaches it, and when it is used (always on, on by default, firm-enabled, or reviewed but not reached) — is at /legal/subprocessors; it is cross-checked against the platform’s environment register on every build.
6. Assistance and deletion
LegalDraft Technologies LLC will use commercially reasonable efforts to assist with security, deletion, export, data-subject, and incident obligations as required by the applicable firm agreement and law.
Request the executable version
For a counter-signable DPA or security review, contact security@estatedraftfl.com.