Data Processing Addendum (DPA)

For firm client data, the law firm is generally the controller or business owner of the client relationship and LegalDraft Technologies LLC acts as processor or service provider for the purpose of operating EstateDraftFL and TrusteeClear. LegalDraft Technologies LLC is software infrastructure, not a law firm.

Data subjects may include firm personnel, clients, trustees, settlors, decedents, beneficiaries, fiduciaries, family members, professional advisors, and support contacts. Data may include contact details, account details, estate and trust information, probate details, documents, notes, generated drafts, audit events, and support communications.

LegalDraft Technologies LLC processes firm data to provide, secure, support, and improve the platform; generate and review drafts; route workflows; maintain audit trails; and perform other services requested by the firm or required by the agreement.

Security measures include Supabase Row-Level Security tenant isolation, encryption in transit, private document access patterns, server-only service-role credentials, audit logging, access controls, security headers, backups, and incident-response practices.

Authorized subprocessors may include hosting, database, authentication, storage, AI, payment, email, analytics, monitoring, and support providers needed to operate the service. Current core providers include Vercel, Supabase, Anthropic, Stripe, Square, and transactional communication providers.

LegalDraft Technologies LLC will use commercially reasonable efforts to assist with security, deletion, export, data-subject, and incident obligations as required by the applicable firm agreement and law.

For a counter-signable DPA or security review, contact security@estatedraftfl.com.