Print this page (Ctrl+P → Save as PDF) or email support@centralizelegal.com to request a countersigned copy.

Data Processing Agreement

Centralize Legal · Effective July 4, 2026 · Online version: https://centralizelegal.com/dpa

This Data Processing Agreement ("DPA") is between:

Customer (Controller):
Firm name: _________________________________
Address: ____________________________________

and

Processor: Centralize Legal
Contact: support@centralizelegal.com

1. Scope

Processor processes Customer Data only to provide the Centralize Legal integration service at https://centralizelegal.com: OAuth connection management, federated search and retrieval, non-privileged metadata indexing, optional notifications, and billing. Processor does not operate an LLM on Customer Data.

2. Processor obligations

• Process Customer Data only on Customer's instructions (use of the service).
• Implement security measures per https://centralizelegal.com/security.
• Not sell Customer Data or use it for advertising or model training.
• Notify Customer without undue delay, and no later than 72 hours after confirmation of a breach affecting Customer Data, to the extent permitted by law.
• Maintain Subprocessors listed at https://centralizelegal.com/subprocessors.

3. BYO-AI boundary

Content retrieved via the service is transmitted to the AI environment the Customer connects. That AI provider is a Customer-connected system under the Customer's own agreement, not a Subprocessor of Centralize Legal.

4. Customer responsibilities

• Lawful basis to connect practice systems and process data through the service.
• Security and appropriateness of the AI environment Customer connects.
• Users connect only accounts they are authorized to use.

5. Deletion

Per-source disconnect removes OAuth connection and associated index data. Firm account closure follows a 14-day grace period, then operational data purge per https://centralizelegal.com/data-residency.

6. Order of precedence

If this DPA conflicts with the Terms of Service on data protection matters, this DPA controls. Liability limits in the Terms apply to this DPA.

7. Term

This DPA remains in effect for the duration of Customer's use of the service.