Data privacy
Your documents and workspace data remain private and are never used to train general-purpose AI models.
Security
Arca protects contracts, negotiations, and legal knowledge with enterprise-grade infrastructure, strict data controls, and safeguards designed for sensitive legal workflows.
Encryption
Customer data is encrypted in transit and at rest using industry-standard protocols.
Infrastructure
Arca runs on hardened cloud infrastructure with continuous monitoring and network isolation.
Access control
Role-based permissions, least-privilege access, and SSO protect sensitive legal work.
Audit logs
Detailed activity records support accountability, oversight, and customer review.
Responsible AI
AI operates in secure processing environments designed to preserve confidentiality and human oversight.
Compliance
Arca is SOC 2 Type II certified and supports SAML-based authentication, audit trails, data processing agreements, and privacy controls for regulated workflows.
Review the Security Policy, Data Processing Agreement, and Subprocessor List.
Questions
Does Arca use customer data to train AI models?
No. Arca does not use customer data to train general-purpose machine learning models.
Is Arca independently audited?
Arca is SOC 2 Type II certified, with independent audits validating controls for security, availability, and confidentiality.
Is a Data Processing Agreement available?
Yes. Arca offers a standard DPA covering processor and subprocessor relationships.
For security documentation or a vendor review, contact contact@arca.inc.