Terms of Service

These User Terms of Service Agreement ("Agreement" or "Terms”) governs your access, use and subscription to the services provided by DocUnlock, Inc. ("DocUnlock," "Company," "we," "us," or "our") – all as set forth the legally binding terms and conditions that govern your use of the website ("Website" or "Service"). By accessing or using the website, you are accepting these terms (on behalf of yourself or the entity that you represent), and you represent and warrant that you have the right, authority, and capacity to enter into these terms (on behalf of yourself or the entity that you represent). You may not access or use the website or accept the terms if you are not at least 18 years old. By creating an Account or using the Service, you affirm that you are at least 18 years of age. DocUnlock does not knowingly collect Personal Data from individuals under 18. If we become aware that we have inadvertently collected Personal Data from an individual under 18 without appropriate authorization, we will take steps to delete such data promptly. 

Our collection and use of Personal Data in connection with the Service is described in our Privacy Policy, available at https://www.docunlock.com/legal/privacy-policy. The Privacy Policy is incorporated into and forms part of these Terms. By using the Service, you acknowledge that you have read and understood the Privacy Policy. If you are accepting these Terms on behalf of an organization, you represent that you have authority to bind that organization. If you do not agree with all of the provisions of these terms, do not access and/or use the website. Our use of cookies and similar tracking technologies is described in our Cookie Policy, available at https://www.docunlock.com/legal/cookie-policy. By using the Service, you consent to the use of essential cookies as described in the Cookie Policy. Non-essential cookies will only be placed with your explicit consent, which you may manage through our cookie preference center available on the Website.

Use of the Service is also subject to DocUnlock's Acceptable Use Policy, available at https://www.docunlock.com/legal/acceptable-use-policy, which is incorporated into and forms part of these Terms. By using the Service, you agree to comply with the Acceptable Use Policy.

Definitions

"Customer" means the individual or entity that registers for and uses the Service.

"Customer Data" means all data, documents, and files provided by Customer to the Service, and all outputs, derivatives, and processed results generated through Customer's use of the Service.

"Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data protection laws.

"Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.

"Subprocessor" means any third party engaged by DocUnlock to Process Customer Data.

"User" means any individual authorized by Customer to access the Service.

Accounts

Account Creation. In order to use certain features of the Site, you must register for an account (“Account”) and provide certain information about yourself as prompted by the account registration form. You represent and warrant that: (a) all required registration information you submit is truthful and accurate; (b) you will maintain the accuracy of such information. Company may suspend or terminate your Account in accordance with the Term and Termination section.

Account Responsibilities. You are responsible for maintaining the confidentiality of your Account login information and are fully responsible for all activities that occur under your Account. You agree to immediately notify Company at security@docunlock.com of any unauthorized use, or suspected unauthorized use of your Account or any other breach of security. Company cannot and will not be liable for any loss or damage arising from your failure to comply with the above requirements.

Access to the Site

License. Subject to these Terms, Company grants you a non-transferable, non-exclusive, revocable, limited license to use and access the Site solely for your own personal, noncommercial use.

Certain Restrictions. The rights granted to you in these Terms are subject to the following restrictions: (a) you shall not license, sell, rent, lease, transfer, assign, distribute, host, or otherwise commercially exploit the Site, whether in whole or in part, or any content displayed on the Site; (b) you shall not modify, make derivative works of, disassemble, reverse compile or reverse engineer any part of the Site; (c) you shall not access the Site in order to build a similar or competitive website, product, or service; and (d) except as expressly stated herein, no part of the Site may be copied, reproduced, distributed, republished, downloaded, displayed, posted or transmitted in any form or by any means. Unless otherwise indicated, any future release, update, or other addition to functionality of the Site shall be subject to these Terms. All copyright and other proprietary notices on the Site (or on any content displayed on the Site) must be retained on all copies thereof.

Modification. Company reserves the right, at any time, to modify, suspend, or discontinue the Site (in whole or in part) with or without notice to you. You agree that Company will not be liable to you or to any third party for any modification, suspension, or discontinuation of the Site or any part thereof.

No Support or Maintenance. You acknowledge and agree that Company will have no obligation to provide you with any support or maintenance in connection with the Site.

Ownership. You acknowledge that all the intellectual property rights, including copyrights, patents, trade marks, and trade secrets, in the Site and its content are owned by Company or Company’s suppliers. Neither these Terms (nor your access to the Site) transfers to you or any third party any rights, title or interest in or to such intellectual property rights, except for the limited access rights expressly set forth in the License. Company and its suppliers reserve all rights not granted in these Terms. There are no implied licenses granted under these Terms.

Feedback. If you provide Company with any feedback or suggestions regarding the Site (“Feedback”), you hereby assign to Company all rights in such Feedback and agree that Company shall have the right to use and fully exploit such Feedback and related information in any manner it deems appropriate. Company will treat any Feedback you provide to Company as non-confidential and non-proprietary. You agree that you will not submit to Company any information or ideas that you consider to be confidential or proprietary.

The Service

Provision of the Service.  Subject to all the terms of this Agreement, DocUnlock grants Customer the non-sublicensable, non-transferrable, nonexclusive, limited right to remotely access and use the service described in an Order Document and any associated materials provided by DocUnlock (such as any technical documentation) (collectively, the “Service”) - but only for Customer’s business purposes.

Support. DocUnlock will provide Customer with reasonable support in accordance with DocUnlock’s standard practices.

General Restrictions. Customer shall not (and shall not allow any third party to): (a) use the Service on behalf of, or to provide services to, any third party; (b) use the Service to help develop and competitive product or service, (c) use the Service for the benefit of any third party, (d) reverse engineer, decompile, disassemble, or otherwise seek to obtain the source code to any of any part of the Service, (e) modify or create derivatives of the Service or any other materials provided by DocUnlock, or (f) remove or obscure any proprietary or other notices contained in the Service or documentation provided by DocUnlock. Customer will not disclose any pricing related information, or information related to performance of the Service, to any third party (and all such information is DocUnlock’s Confidential Information).

Aggregate and Anonymized Data. DocUnlock may create aggregate, statistical, or anonymized data derived from Customer Data and usage of the Service ("Aggregate Data"). DocUnlock applies industry-standard anonymization techniques (which may include aggregation, k-anonymity, differential privacy, and/or data masking) to ensure that Aggregate Data cannot reasonably be used to identify Customer, any User, or any individual data subject, taking into account all objective factors including the costs of and amount of time required for identification, available technology, and technological developments (as contemplated by GDPR Recital 26). DocUnlock periodically reviews its anonymization processes to ensure they remain effective against evolving re-identification techniques.

(a) Use of Aggregate Data. DocUnlock may use Aggregate Data for any lawful business purpose, including: (i) analyzing and improving the Service, (ii) developing new products and features, (iii) conducting research and benchmarking, (iv) training and improving machine learning models and algorithms, and (v) generating industry insights and reports.

(b) Lawful Basis. DocUnlock relies on legitimate interests as the lawful basis for creating and Processing Aggregate Data. DocUnlock has conducted a Legitimate Interest Assessment for the creation and use of Aggregate Data, which considers the anonymization measures applied, the minimal impact on data subjects, and the safeguards described in these Terms. This assessment is available upon request by contacting dpo@docunlock.com.

(c) Retention. Aggregate Data may be retained indefinitely, including after termination of this Agreement, as it is no longer Personal Data once anonymized.

(d) No Algorithm Training. DocUnlock does not use any Personal Data contained within Customer Data — to train, fine-tune, or improve any machine learning or AI model, whether operated by DocUnlock or any third-party Subprocessor. No opt-in for such use is offered.

(e) No Sale of Data. For the avoidance of doubt, the creation and use of Aggregate Data does not constitute a sale of Personal Data under any applicable privacy law.

Customer Data

Generally. “Customer Data” means all (i) data (including documents of any type) provided by Customer or its systems to DocUnlock, and (ii) any documents and data output that are derivatives of the data referenced in (i) and that is generated for Customer via its use of the Service. As between the parties, Customer shall retain all right, title and interest in the Customer Data. Subject to the terms of this Agreement, Customer hereby grants to DocUnlock a non-exclusive, worldwide, royalty-free right to use, copy, store, transmit, modify, create derivative works of and display the Customer Data to the extent necessary to provide the Service to Customer. Customer represents and warrants that (a) it has all rights and authorization to provide the Customer Data, (b) the provision of Customer Data, and DocUnlock’s use of the data as authorized hereunder, is allowed by Customer’s privacy policy, and (c) Customer’s provision, use and maintenance of Customer Data complies with all laws, regulations and third-party rights. For clarity, Customer is fully responsible for ensuring that its end users agree to a Customer privacy policy that allows for such information to be used hereunder.

Customer is solely responsible for ensuring that any Customer Data uploaded to or processed through the Service does not include Personal Data of individuals under 18 unless Customer has obtained all necessary consents or authorizations required under applicable law, including parental or guardian consent where required under GDPR Article 8 or equivalent national implementing legislation. Where Customer uploads such data, Customer acts as the data controller and assumes full responsibility for compliance with applicable child data protection requirements.

Data Processing Agreement. To the extent DocUnlock Processes Personal Data on behalf of Customer, DocUnlock acts as a data processor (or "service provider" under applicable US privacy laws) and Customer acts as the data controller (or "business" under applicable US privacy laws).

For Customers subject to the General Data Protection Regulation ("GDPR"), UK GDPR, Swiss Federal Act on Data Protection, or other applicable data protection laws requiring a written data processing agreement, DocUnlock's Data Processing Agreement ("DPA"), available at https://www.docunlock.com/legal/dpa, is hereby incorporated into and forms part of these Terms.

The DPA includes:

(a) The subject matter, duration, nature, and purpose of Processing;

(b) The types of Personal Data Processed and categories of data subjects;

(c) Customer's instructions for Processing;

(d) Confidentiality obligations for personnel with access to Personal Data;

(e) Technical and organizational security measures (as detailed in Appendix B);

(f) Conditions for engaging Subprocessors;

(g) Assistance with data subject rights requests;

(h) Assistance with security incidents, impact assessments, and regulatory consultations;

(i) Data deletion obligations upon termination;

(j) Audit and compliance verification rights; and

(k) Standard Contractual Clauses for international data transfers.

In the event of any conflict between these Terms and the DPA with respect to the Processing of Personal Data, the DPA shall control. Customers may request an executed copy of the DPA by contacting legal@docunlock.com.

Subprocessors. DocUnlock engages third-party Subprocessors to assist in providing the Service. A current list of Subprocessors is set forth in Appendix A to these Terms available below.

(a) Subprocessor Obligations. DocUnlock ensures that each Subprocessor is bound by written data protection obligations that are no less protective than those set forth in these Terms and the Data Processing Agreement, including obligations regarding confidentiality, security measures, and restrictions on data Processing.

(b) Notification of Changes. DocUnlock will notify Customer at least thirty (30) days before engaging any new Subprocessor or replacing an existing Subprocessor ("Subprocessor Change Notice"). Customers may subscribe to Subprocessor change notifications by emailing privacy@docunlock.com or through their account settings.

(c) Right to Object. Customer may object to a new Subprocessor by providing written notice to privacy@docunlock.com within thirty (30) days of receiving the Subprocessor Change Notice. The objection must include specific, reasonable grounds related to data protection concerns.

(d) Resolution of Objections. Upon receiving an objection, DocUnlock will work in good faith with Customer to address the concerns. This may include: (i) providing additional information about the Subprocessor's data protection practices, (ii) implementing additional safeguards, or (iii) offering an alternative configuration of the Service that does not involve the objected-to Subprocessor. If DocUnlock cannot reasonably accommodate Customer's objection, either party may terminate the affected portion of the Service upon written notice, and Customer will receive a pro-rata refund of any prepaid fees for the terminated Service.

(e) Liability. DocUnlock remains fully liable for the acts and omissions of its Subprocessors to the same extent DocUnlock would be liable if performing the services directly.

(f) AI and Machine Learning Subprocessors. DocUnlock engages third-party AI and large language model ("LLM") providers to deliver core features of the Service. When Customer Data is submitted to these Subprocessors for processing:

(i) Customer Data is transmitted using encryption in transit (TLS 1.2 or higher) and is processed solely for the purpose of providing the Service to Customer;

(ii) DocUnlock maintains contractual commitments from each AI/LLM Subprocessor that Customer Data will not be used for model training, improvement, or any purpose other than providing the requested output, unless Customer has explicitly opted in;

(iii) Customer Data is not retained by AI/LLM Subprocessors beyond the duration necessary to generate the requested output, except as required by applicable law or as disclosed in the relevant Subprocessor's data processing terms;

(iv) DocUnlock monitors AI/LLM Subprocessors' data handling practices and will notify Customer of any material changes through the Subprocessor Change Notice process described in subsection (b) above; and

(v) Customers who wish to restrict which AI/LLM Subprocessors process their data may contact privacy@docunlock.com to discuss available configurations.

Security. DocUnlock will implement and maintain an industry-standard information security program with administrative, physical, and technical safeguards designed to protect the integrity of Customer Data.

Lawful Basis for Processing. When DocUnlock Processes Personal Data, we rely on the following lawful bases under applicable data protection laws, including the EU General Data Protection Regulation ("GDPR"):

(a) Contract Performance. We Process Personal Data as necessary to perform our contractual obligations to Customer, including providing, maintaining, and supporting the Service.

(b) Legitimate Interests. We Process Personal Data for our legitimate business interests, including: (i) improving and developing the Service, (ii) ensuring the security and integrity of the Service, (iii) analyzing usage patterns to enhance user experience, and (iv) creating Aggregate Data for product improvement and algorithm training. DocUnlock has conducted Legitimate Interest Assessments for each of the above purposes in accordance with GDPR Article 6(1)(f) and applicable regulatory guidance. These assessments evaluate the necessity of the Processing, the impact on data subjects' rights and freedoms, and the safeguards in place to mitigate any impact. Copies of relevant Legitimate Interest Assessments are available upon request by contacting dpo@docunlock.com.

(c) Legal Obligations. We Process Personal Data as necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

(d) Consent. Where required by applicable law and not covered by another lawful basis, we obtain consent before Processing Personal Data.

Where DocUnlock Processes Personal Data on behalf of Customer, Customer acts as the data controller and is responsible for establishing the lawful basis for such Processing. DocUnlock acts as a data processor and Processes such data only in accordance with Customer's documented instructions.

International Data Transfers. DocUnlock is based in the United States, and Customer Data (including Personal Data) is stored and Processed in the United States.

Data Subject Rights

Rights for EEA and UK Residents. If you are located in the European Economic Area ("EEA") or United Kingdom ("UK"), you have the following rights regarding your Personal Data under the General Data Protection Regulation ("GDPR") and UK GDPR:

(a) Right of Access. You have the right to request a copy of the Personal Data we hold about you and information about how we Process it.

(b) Right to Rectification. You have the right to request correction of inaccurate Personal Data or completion of incomplete Personal Data.

(c) Right to Erasure. You have the right to request deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

(d) Right to Restriction of Processing. You have the right to request that we restrict Processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data.

(e) Right to Data Portability. You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

(f) Right to Object. You have the right to object to Processing of your Personal Data based on legitimate interests, on grounds relating to your particular situation. Upon receiving such an objection, DocUnlock will cease Processing the relevant Personal Data unless we demonstrate compelling legitimate grounds for the Processing that override your interests, rights, and freedoms, or where the Processing is necessary for the establishment, exercise, or defense of legal claims. We will inform you of the outcome of your objection within one (1) month of receipt.

(g) Right to Object to Direct Marketing. You have the right to object to Processing of your Personal Data for direct marketing purposes at any time. Upon receiving such an objection, DocUnlock will cease Processing your Personal Data for direct marketing purposes without exception. No balancing test applies to direct marketing objections.

(h) Rights Related to Automated Decision-Making. You have the right not to be subject to a decision based solely on automated Processing, including profiling, that produces legal effects or similarly significantly affects you, except in limited circumstances permitted by law.

(i) Right to Withdraw Consent. Where Processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of Processing conducted prior to withdrawal.

Exercising Your Rights. To exercise any of these rights, please contact us at privacy@docunlock.com. We will respond to your request without undue delay and in any event within one (1) month of receipt. If your request is complex or we have received a high volume of requests, we may extend this period by up to two (2) additional months, in which case we will notify you of the extension and the reasons for it within the first month. We may request information to verify your identity before processing your request. If we are unable to fulfill your request, we will inform you of the reasons and of your right to lodge a complaint with a supervisory authority.

Data Protection Officer. Our Data Protection Officer can be contacted at dpo@docunlock.com for questions about our data protection practices or to exercise your rights.

Right to Lodge a Complaint. If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Customer Responsibilities. Where Customer is the data controller and DocUnlock Processes Personal Data on Customer's behalf, Customer is responsible for responding to data subject requests. DocUnlock will assist Customer in fulfilling such requests in accordance with applicable law and the terms of this Agreement.

Ownership

Ownership. Customer will own the copyright to all Customer Data. With respect to the Customer Data, DocUnlock assigns all copyrights in such data to Customer. Except for such data, Customer acknowledges that no intellectual property rights are assigned or transferred to Customer hereunder. Customer is obtaining only a limited right to use the Service.

Term and Termination

Subject to this Section, these Terms will remain in full force and effect while you use the Site. We may suspend or terminate your rights to use the Site (including your Account) at any time for any reason at our sole discretion, including for any use of the Site in violation of these Terms. Upon termination of your rights under these Terms, your Account and right to access and use the Site will terminate immediately. Company will not have any liability whatsoever to you for any termination of your rights under these Terms, including for termination of your Account. Even after your rights under these Terms are terminated, the following provisions of these Terms will remain in effect: Certain Restrictions, Modification, No Support or Maintenance, Ownership, Feedback, Indemnification, Third-Party Links & Ads; Other Users, Disclaimers, Limitation on Liability, and all provisions under the General Terms.

Customer Data. On Customer’s request after termination of this Agreement, DocUnlock will (as requested by Customer) delete all Customer Data. After ninety (90) days from termination, DocUnlock may delete all Customer Data.

Data Retention. DocUnlock retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and as permitted under these Terms.

(a) Customer Data. DocUnlock retains Customer Data for the duration of the Agreement to provide the Service. Customer may delete Customer Data at any time through the Service interface or by contacting support@docunlock.com.

(b) Post-Termination Retention. Upon termination or expiration of this Agreement:

(i) Customer may request deletion of Customer Data within ninety (90) days of termination by contacting support@docunlock.com;

(ii) DocUnlock will provide Customer Data in a commonly used, machine-readable format upon request;

(iii) After ninety (90) days from termination, DocUnlock will delete all Customer Data from its systems, except as required by law or as set forth below; and

(iv) DocUnlock will direct its Subprocessors to delete Customer Data in accordance with these timelines.

(c) Aggregate Data. Aggregate Data that has been anonymized such that it cannot reasonably be used to identify Customer or any individual may be retained indefinitely for analytics, benchmarking, and service improvement purposes.

(d) Backup Retention. Customer Data may persist in encrypted backup systems for up to ninety (90) days following deletion from production systems, after which it will be permanently deleted through the normal backup rotation process. During this period:

(i) Backup data is encrypted at rest using AES-256 encryption and is subject to strict access controls that prevent its use for any purpose other than disaster recovery;

(ii) If Customer Data that is subject to a deletion or erasure request is contained in a backup, DocUnlock will ensure that such data is not restored to production systems and is treated as functionally inaccessible until it is permanently deleted through the backup rotation process; and

(iii) In the event a backup containing deleted Customer Data must be restored for disaster recovery purposes, DocUnlock will re-apply any pending deletion or erasure requests promptly following restoration.

(e) Legal Holds. Notwithstanding the foregoing, DocUnlock may retain Customer Data as required to comply with applicable law, regulation, legal process, or enforceable governmental request, or to establish, exercise, or defend legal claims. DocUnlock will notify Customer of any such requirement unless prohibited by law.

(f) Logs and Security Data. System logs, access logs, and security-related data may be retained for up to twevles (12) months for security monitoring, fraud prevention, and compliance purposes.

(g) Account Information. Basic account information (such as name, email address, and billing history) may be retained for up to seven (7) years after termination. The lawful basis for this retention is compliance with legal obligations under GDPR Article 6(1)(c), including but not limited to:

(i) U.S. federal tax record-keeping requirements under the Internal Revenue Code (26 U.S.C. § 6001 et seq.) and associated IRS regulations;

(ii) State tax and business record-keeping obligations applicable to DocUnlock's jurisdiction of incorporation and operation;

(iii) Accounting record retention requirements under generally accepted accounting principles; and

(iv) Preservation of records necessary to establish, exercise, or defend legal claims during applicable statutes of limitation.

DocUnlock limits access to retained account information to personnel with a legitimate need, and such data is subject to the security measures described in Appendix B. Upon expiration of the applicable retention period, account information is permanently deleted.

Warranties; Disclaimer

Mutual Warranties. Each party represents and warrants that (i) it has all right, power, and authority to execute this Agreement and perform hereunder, (ii) its activities in connection with this Agreement will not violate any laws or regulations, and (iii) its performance will not conflict with an obligations it has to any third party.

Disclaimer; Limitation. THE SERVICE IS PROVIDED “AS IS” AND DOCUNLOCK (AND OUR SUPPLIERS) EXPRESSLY DISCLAIMS ANY AND ALL OTHER WARRANTIES AND CONDITIONS OF ANY KIND, EXPRESS, IMPLIED, OR STATUTORY INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, ACCURACY, OR NON-INFRINGEMENT. WE (AND OUR SUPPLIERS) MAKE NO WARRANTY THAT THE SITE WILL MEET YOUR REQUIREMENTS, WILL BE AVAILABLE ON AN UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE BASIS, OR WILL BE ACCURATE, RELIABLE, FREE OF VIRUSES OR OTHER HARMFUL CODE, COMPLETE, LEGAL, OR SAFE. IF APPLICABLE LAW REQUIRES ANY WARRANTIES WITH RESPECT TO THE SITE, ALL SUCH WARRANTIES ARE LIMITED IN DURATION TO 90 DAYS FROM THE DATE OF FIRST USE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU. SOME JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, SO THE ABOVE LIMITATION MAY NOT APPLY TO YOU. THE LIMITATIONS ABOVE WILL NOT APPLY TO CUSTOMER’S BREACH OF ANY LICENSE RESTRICTIONS.

Indemnification. You agree to indemnify and hold Company (and its officers, employees, and agents) harmless, including costs and attorneys’ fees, from any claim or demand made by any third party due to or arising out of (a) your use of the Site, (b) your violation of these Terms or (c) your violation of applicable laws or regulations. Company reserves the right, at your expense, to assume the exclusive defense and control of any matter for which you are required to indemnify us, and you agree to cooperate with our defense of these claims. You agree not to settle any matter without the prior written consent of Company. Company will use reasonable efforts to notify you of any such claim, action or proceeding upon becoming aware of it.

Limitation on Liability. TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL COMPANY (OR OUR SUPPLIERS) BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY LOST PROFITS, LOST DATA, COSTS OF PROCUREMENT OF SUBSTITUTE PRODUCTS, OR ANY INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL OR PUNITIVE DAMAGES ARISING FROM OR RELATING TO THESE TERMS OR YOUR USE OF, OR INABILITY TO USE, THE SITE, EVEN IF COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ACCESS TO, AND USE OF, THE SITE IS AT YOUR OWN DISCRETION AND RISK, AND YOU WILL BE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR DEVICE OR COMPUTER SYSTEM, OR LOSS OF DATA RESULTING THEREFROM.TO THE MAXIMUM EXTENT PERMITTED BY LAW, NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY DAMAGES ARISING FROM OR RELATED TO THESE TERMS (FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION), WILL AT ALL TIMES BE LIMITED TO A MAXIMUM OF THE TOTAL FEES PAID BY CUSTOMER TO DOCUNLOCK IN THE THREE (3) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM. THE EXISTENCE OF MORE THAN ONE CLAIM WILL NOT ENLARGE THIS LIMIT. YOU AGREE THAT OUR SUPPLIERS WILL HAVE NO LIABILITY OF ANY KIND ARISING FROM OR RELATING TO THESE TERMS.SOME JURISDICTIONS DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU.

Third-Party Links & Ads; Other Users

Third-Party Links & Ads. The Site may contain links to third-party websites and services, and/or display advertisements for third parties (collectively, “Third-Party Links & Ads”). Such Third-Party Links & Ads are not under the control of Company, and Company is not responsible for any Third-Party Links & Ads. Company provides access to these Third-Party Links & Ads only as a convenience to you, and does not review, approve, monitor, endorse, warrant, or make any representations with respect to Third-Party Links & Ads. You use all Third-Party Links & Ads at your own risk, and should apply a suitable level of caution and discretion in doing so. When you click on any of the Third-Party Links & Ads, the applicable third party’s terms and policies apply, including the third party’s privacy and data gathering practices. You should make whatever investigation you feel necessary or appropriate before proceeding with any transaction in connection with such Third-Party Links & Ads.

Other Users. Your interactions with other Site users are solely between you and such users. You agree that Company will not be responsible for any loss or damage incurred as the result of any such interactions. If there is a dispute between you and any Site user, we are under no obligation to become involved.

Release. You hereby release and forever discharge Company (and our officers, employees, agents, successors, and assigns) from, and hereby waive and relinquish, each and every past, present and future dispute, claim, controversy, demand, right, obligation, liability, action and cause of action of every kind and nature (including personal injuries, death, and property damage), that has arisen or arises directly or indirectly out of, or that relates directly or indirectly to, the Site (including any interactions with, or act or omission of, other Site users or any Third-Party Links & Ads). IF YOU ARE A CALIFORNIA RESIDENT, YOU HEREBY WAIVE CALIFORNIA CIVIL CODE SECTION 1542 IN CONNECTION WITH THE FOREGOING, WHICH STATES: “A GENERAL RELEASE DOES NOT EXTEND TO CLAIMS WHICH THE CREDITOR OR RELEASING PARTY DOES NOT KNOW OR SUSPECT TO EXIST IN HIS OR HER FAVOR AT THE TIME OF EXECUTING THE RELEASE, WHICH IF KNOWN BY HIM OR HER MUST HAVE MATERIALLY AFFECTED HIS OR HER SETTLEMENT WITH THE DEBTOR OR RELEASED PARTY.”

Confidential Information

Each party agrees that all business and technical information it obtains (“Receiving Party”) from the disclosing party (“Disclosing Party”) constitute the confidential property of the Disclosing Party (“Confidential Information”), provided that it is identified as confidential at the time of disclosure or should be reasonably known by the Receiving Party to be Confidential Information due to the nature of the information disclosed and the circumstances surrounding the disclosure. All fees and pricing information will be DocUnlock’s Confidential Information. Except as expressly authorized herein, the Receiving Party will, using reasonable measures, hold in confidence and not use or disclose any Confidential Information. The Receiving Party’s nondisclosure obligation shall not apply to information which the Receiving Party can document: (i) was rightfully in its possession or known to it prior to receipt of the Confidential Information; or (ii) is or has become public knowledge through no fault of the Receiving Party. If required to be disclosed by law, the Receiving Party will immediately notify the Disclosing Party and use its best efforts to limit the disclosure. The Receiving Party acknowledges that disclosure of Confidential Information would cause substantial harm for which damages alone would not be a sufficient remedy, and therefore that upon any such disclosure by the Receiving Party the Disclosing Party shall be entitled to appropriate equitable relief (without the posting of a bond or similar instrument) in addition to whatever other remedies it might have at law.

General Terms

Changes. These Terms are subject to occasional revision, and if we make any substantial changes, we may notify you by sending you an e-mail to the last e-mail address you provided to us (if any), and/or by prominently posting notice of the changes on our Site. You are responsible for providing us with your most current email address. In the event that the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice. Continued use of our Site following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.

Notwithstanding the foregoing, where any change to these Terms materially affects the Processing of Personal Data in a manner that requires consent as a lawful basis under applicable data protection law, DocUnlock will obtain your explicit consent to such changes before they take effect. In such cases, continued use of the Service alone will not constitute valid consent. DocUnlock will clearly identify the nature of the change and provide you with the opportunity to accept or decline. If you decline, DocUnlock may not be able to continue providing certain features of the Service, and you may terminate your Account in accordance with the Term and Termination section.

Dispute Resolution. Please read the following arbitration agreement in this Section (the “Arbitration Agreement”) carefully.  It requires you to arbitrate disputes with Company, its parent companies, subsidiaries, affiliates, successors and assigns and all of their respective officers, directors, employees, agents, and representatives (collectively, the “Company Parties”) and limits the manner in which you can seek relief from the Company Parties.

Applicability of Arbitration Agreement. You agree that any dispute between you and any of the Company Parties relating in any way to the Site, the services offered on the Site (the “Services”) or these Terms will be resolved by binding arbitration, rather than in court, except that (1) you and the Company Parties may assert individualized claims in small claims court if the claims qualify, remain in such court and advance solely on an individual, non-class basis; and (2) you or the Company Parties may seek equitable relief in court for infringement or other misuse of intellectual property rights (such as trademarks, trade dress, domain names, trade secrets, copyrights, and patents). This Arbitration Agreement shall survive the expiration or termination of these Terms and shall apply, without limitation, to all claims that arose or were asserted before you agreed to these Terms (in accordance with the preamble) or any prior version of these Terms. This Arbitration Agreement does not preclude you from bringing issues to the attention of federal, state or local agencies. Such agencies can, if the law allows, seek relief against the Company Parties on your behalf. For purposes of this Arbitration Agreement, “Dispute” will also include disputes that arose or involve facts occurring before the existence of this or any prior versions of the Agreement as well as claims that may arise after the termination of these Terms.

Informal Dispute Resolution. There might be instances when a Dispute arises between you and Company. If that occurs, Company is committed to working with you to reach a reasonable resolution. You and Company agree that good faith informal efforts to resolve Disputes can result in a prompt, low‐cost and mutually beneficial outcome. You and Company therefore agree that before either party commences arbitration against the other (or initiates an action in small claims court if a party so elects), we will personally meet and confer telephonically or via videoconference, in a good faith effort to resolve informally any Dispute covered by this Arbitration Agreement (“Informal Dispute Resolution Conference”). If you are represented by counsel, your counsel may participate in the conference, but you will also participate in the conference.The party initiating a Dispute must give notice to the other party in writing of its intent to initiate an Informal Dispute Resolution Conference (“Notice”), which shall occur within 45 days after the other party receives such Notice, unless an extension is mutually agreed upon by the parties. Notice to Company that you intend to initiate an Informal Dispute Resolution Conference should be sent by email to: legal@docunlock.com, or by regular mail to PO Box 15683, San Francisco, CA 94115. The Notice must include: (1) your name, telephone number, mailing address, e‐mail address associated with your account (if you have one); (2) the name, telephone number, mailing address and e‐mail address of your counsel, if any; and (3) a description of your Dispute. The Informal Dispute Resolution Conference shall be individualized such that a separate conference must be held each time either party initiates a Dispute, even if the same law firm or group of law firms represents multiple users in similar cases, unless all parties agree; multiple individuals initiating a Dispute cannot participate in the same Informal Dispute Resolution Conference unless all parties agree. In the time between a party receiving the Notice and the Informal Dispute Resolution Conference, nothing in this Arbitration Agreement shall prohibit the parties from engaging in informal communications to resolve the initiating party’s Dispute. Engaging in the Informal Dispute Resolution Conference is a condition precedent and requirement that must be fulfilled before commencing arbitration. The statute of limitations and any filing fee deadlines shall be tolled while the parties engage in the Informal Dispute Resolution Conference process required by this section.

Arbitration Rules and Forum. These Terms evidence a transaction involving interstate commerce; and notwithstanding any other provision herein with respect to the applicable substantive law, the Federal Arbitration Act, 9 U.S.C. § 1 et seq., will govern the interpretation and enforcement of this Arbitration Agreement and any arbitration proceedings. If the Informal Dispute Resolution Process described above does not resolve satisfactorily within 60 days after receipt of your Notice, you and Company agree that either party shall have the right to finally resolve the Dispute through binding arbitration. The Federal Arbitration Act governs the interpretation and enforcement of this Arbitration Agreement. The arbitration will be conducted by JAMS, an established alternative dispute resolution provider. Disputes involving claims and counterclaims with an amount in controversy under $250,000, not inclusive of attorneys’ fees and interest, shall be subject to JAMS’ most current version of the Streamlined Arbitration Rules and procedures available at http://www.jamsadr.com/rules-streamlined-arbitration/; all other claims shall be subject to JAMS’s most current version of the Comprehensive Arbitration Rules and Procedures, available at http://www.jamsadr.com/rules-comprehensive-arbitration/. JAMS’s rules are also available at www.jamsadr.com or by calling JAMS at 800-352-5267. A party who wishes to initiate arbitration must provide the other party with a request for arbitration (the “Request”). The Request must include: (1) the name, telephone number, mailing address, e‐mail address of the party seeking arbitration and the account username (if applicable) as well as the email address associated with any applicable account; (2) a statement of the legal claims being asserted and the factual bases of those claims; (3) a description of the remedy sought and an accurate, good‐faith calculation of the amount in controversy in United States Dollars; (4) a statement certifying completion of the Informal Dispute Resolution process as described above; and (5) evidence that the requesting party has paid any necessary filing fees in connection with such arbitration.

If the party requesting arbitration is represented by counsel, the Request shall also include counsel’s name, telephone number, mailing address, and email address. Such counsel must also sign the Request. By signing the Request, counsel certifies to the best of counsel’s knowledge, information, and belief, formed after an inquiry reasonable under the circumstances, that: (1) the Request is not being presented for any improper purpose, such as to harass, cause unnecessary delay, or needlessly increase the cost of dispute resolution; (2) the claims, defenses and other legal contentions are warranted by existing law or by a nonfrivolous argument for extending, modifying, or reversing existing law or for establishing new law; and (3) the factual and damages contentions have evidentiary support or, if specifically so identified, will likely have evidentiary support after a reasonable opportunity for further investigation or discovery.Unless you and Company otherwise agree, or the Batch Arbitration process discussed in Subsection 8.2(h) is triggered, the arbitration will be conducted in the county where you reside. Subject to the JAMS Rules, the arbitrator may direct a limited and reasonable exchange of information between the parties, consistent with the expedited nature of the arbitration. If the JAMS is not available to arbitrate, the parties will select an alternative arbitral forum. Your responsibility to pay any JAMS fees and costs will be solely as set forth in the applicable JAMS Rules.You and Company agree that all materials and documents exchanged during the arbitration proceedings shall be kept confidential and shall not be shared with anyone except the parties’ attorneys, accountants, or business advisors, and then subject to the condition that they agree to keep all materials and documents exchanged during the arbitration proceedings confidential.

Authority of Arbitrator. The arbitrator shall have exclusive authority to resolve all disputes subject to arbitration hereunder including, without limitation, any dispute related to the interpretation, applicability, enforceability or formation of this Arbitration Agreement or any portion of the Arbitration Agreement, except for the following: (1) all Disputes arising out of or relating to the subsection entitled “Waiver of Class or Other Non-Individualized Relief,” including any claim that all or part of the subsection entitled “Waiver of Class or Other Non-Individualized Relief” is unenforceable, illegal, void or voidable, or that such subsection entitled “Waiver of Class or Other Non-Individualized Relief” has been breached, shall be decided by a court of competent jurisdiction and not by an arbitrator; (2) except as expressly contemplated in the subsection entitled “Batch Arbitration,” all Disputes about the payment of arbitration fees shall be decided only by a court of competent jurisdiction and not by an arbitrator; (3) all Disputes about whether either party has satisfied any condition precedent to arbitration shall be decided only by a court of competent jurisdiction and not by an arbitrator; and (4) all Disputes about which version of the Arbitration Agreement applies shall be decided only by a court of competent jurisdiction and not by an arbitrator. The arbitration proceeding will not be consolidated with any other matters or joined with any other cases or parties, except as expressly provided in the subsection entitled “Batch Arbitration.” The arbitrator shall have the authority to grant motions dispositive of all or part of any claim or dispute. The arbitrator shall have the authority to award monetary damages and to grant any non-monetary remedy or relief available to an individual party under applicable law, the arbitral forum’s rules, and these Terms (including the Arbitration Agreement). The arbitrator shall issue a written award and statement of decision describing the essential findings and conclusions on which any award (or decision not to render an award) is based, including the calculation of any damages awarded. The arbitrator shall follow the applicable law. The award of the arbitrator is final and binding upon you and us. Judgment on the arbitration award may be entered in any court having jurisdiction.

Waiver of Jury Trial. EXCEPT AS SPECIFIED IN SECTION 8.2(A) YOU AND THE COMPANY PARTIES HEREBY WAIVE ANY CONSTITUTIONAL AND STATUTORY RIGHTS TO SUE IN COURT AND HAVE A TRIAL IN FRONT OF A JUDGE OR A JURY. You and the Company Parties are instead electing that all covered claims and disputes shall be resolved exclusively by arbitration under this Arbitration Agreement, except as specified in Section 8.2(a) above. An arbitrator can award on an individual basis the same damages and relief as a court and must follow these Terms as a court would. However, there is no judge or jury in arbitration, and court review of an arbitration award is subject to very limited review.

Waiver of Class or Other Non-Individualized Relief.  YOU AND COMPANY AGREE THAT, EXCEPT AS SPECIFIED IN SUBSECTION 8.2(H) EACH OF US MAY BRING CLAIMS AGAINST THE OTHER ONLY ON AN INDIVIDUAL BASIS AND NOT ON A CLASS, REPRESENTATIVE, OR COLLECTIVE BASIS, AND THE PARTIES HEREBY WAIVE ALL RIGHTS TO HAVE ANY DISPUTE BE BROUGHT, HEARD, ADMINISTERED, RESOLVED, OR ARBITRATED ON A CLASS, COLLECTIVE, REPRESENTATIVE, OR MASS ACTION BASIS. ONLY INDIVIDUAL RELIEF IS AVAILABLE, AND DISPUTES OF MORE THAN ONE CUSTOMER OR USER CANNOT BE ARBITRATED OR CONSOLIDATED WITH THOSE OF ANY OTHER CUSTOMER OR USER. Subject to this Arbitration Agreement, the arbitrator may award declaratory or injunctive relief only in favor of the individual party seeking relief and only to the extent necessary to provide relief warranted by the party’s individual claim. Nothing in this paragraph is intended to, nor shall it, affect the terms and conditions under the Subsection 8.2(h) entitled “Batch Arbitration.” Notwithstanding anything to the contrary in this Arbitration Agreement, if a court decides by means of a final decision, not subject to any further appeal or recourse, that the limitations of this subsection, “Waiver of Class or Other Non-Individualized Relief,” are invalid or unenforceable as to a particular claim or request for relief (such as a request for public injunctive relief), you and Company agree that that particular claim or request for relief (and only that particular claim or request for relief) shall be severed from the arbitration and may be litigated in the state or federal courts located in the State of California. All other Disputes shall be arbitrated or litigated in small claims court. This subsection does not prevent you or Company from participating in a class-wide settlement of claims.

Attorneys’ Fees and Costs. The parties shall bear their own attorneys’ fees and costs in arbitration unless the arbitrator finds that either the substance of the Dispute or the relief sought in the Request was frivolous or was brought for an improper purpose (as measured by the standards set forth in Federal Rule of Civil Procedure 11(b)). If you or Company need to invoke the authority of a court of competent jurisdiction to compel arbitration, then the party that obtains an order compelling arbitration in such action shall have the right to collect from the other party its reasonable costs, necessary disbursements, and reasonable attorneys’ fees incurred in securing an order compelling arbitration. The prevailing party in any court action relating to whether either party has satisfied any condition precedent to arbitration, including the Informal Dispute Resolution Process, is entitled to recover their reasonable costs, necessary disbursements, and reasonable attorneys’ fees and costs.

Batch Arbitration. To increase the efficiency of administration and resolution of arbitrations, you and Company agree that in the event that there are 100 or more individual Requests of a substantially similar nature filed against Company by or with the assistance of the same law firm, group of law firms, or organizations, within a 30 day period (or as soon as possible thereafter), the JAMS shall (1) administer the arbitration demands in batches of 100 Requests per batch (plus, to the extent there are less than 100 Requests left over after the batching described above, a final batch consisting of the remaining Requests); (2) appoint one arbitrator for each batch; and (3) provide for the resolution of each batch as a single consolidated arbitration with one set of filing and administrative fees due per side per batch, one procedural calendar, one hearing (if any) in a place to be determined by the arbitrator, and one final award (“Batch Arbitration”).All parties agree that Requests are of a “substantially similar nature” if they arise out of or relate to the same event or factual scenario and raise the same or similar legal issues and seek the same or similar relief. To the extent the parties disagree on the application of the Batch Arbitration process, the disagreeing party shall advise the JAMS, and the JAMS shall appoint a sole standing arbitrator to determine the applicability of the Batch Arbitration process (“Administrative Arbitrator”). In an effort to expedite resolution of any such dispute by the Administrative Arbitrator, the parties agree the Administrative Arbitrator may set forth such procedures as are necessary to resolve any disputes promptly. The Administrative Arbitrator’s fees shall be paid by Company.You and Company agree to cooperate in good faith with the JAMS to implement the Batch Arbitration process including the payment of single filing and administrative fees for batches of Requests, as well as any steps to minimize the time and costs of arbitration, which may include: (1) the appointment of a discovery special master to assist the arbitrator in the resolution of discovery disputes; and (2) the adoption of an expedited calendar of the arbitration proceedings.This Batch Arbitration provision shall in no way be interpreted as authorizing a class, collective and/or mass arbitration or action of any kind, or arbitration involving joint or consolidated claims under any circumstances, except as expressly set forth in this provision.

Governing Law; Jurisdiction and Venue. This Agreement shall be governed by the laws of the State of California and the United States without regard to conflicts of laws provisions thereof, and without regard to the United Nations Convention on the International Sale of Goods.  Except for claims for injunctive or equitable relief or claims regarding intellectual property rights (which may be brought in any competent court), any dispute arising under this Agreement shall be finally settled in accordance with the Rules of the Judicial Arbitration and Mediation Service (“JAMS”) in accordance with such Rules.  To the extent the JAMS streamlined rules are available – they shall apply. The arbitration shall take place in San Francisco, California, in the English language and the arbitral decision may be enforced in any court. To the extent a claim cannot legally be arbitrated (as determined by an arbitrator), the jurisdiction and venue for actions related to the subject matter hereof shall be the state and United States federal courts located in San Francisco, California and both parties hereby submit to the personal jurisdiction of such courts.

30-Day Right to Opt Out.  You have the right to opt out of the provisions of this Arbitration Agreement by sending a timely written notice of your decision to opt out to the following address: legal@docunlock.com, or by regular mail to PO Box 15683, San Francisco, CA 94115, within 30 days after first becoming subject to this Arbitration Agreement. Your notice must include your name and address and a clear statement that you want to opt out of this Arbitration Agreement. If you opt out of this Arbitration Agreement, all other parts of these Terms will continue to apply to you. Opting out of this Arbitration Agreement has no effect on any other arbitration agreements that you may currently have with us, or may enter into in the future with us.

Invalidity, Expiration. Except as provided in the subsection entitled “Waiver of Class or Other Non-Individualized Relief”, if any part or parts of this Arbitration Agreement are found under the law to be invalid or unenforceable, then such specific part or parts shall be of no force and effect and shall be severed and the remainder of the Arbitration Agreement shall continue in full force and effect. You further agree that any Dispute that you have with Company as detailed in this Arbitration Agreement must be initiated via arbitration within the applicable statute of limitation for that claim or controversy, or it will be forever time barred. Likewise, you agree that all applicable statutes of limitation will apply to such arbitration in the same manner as those statutes of limitation would apply in the applicable court of competent jurisdiction.

Modification. Notwithstanding any provision in these Terms to the contrary, we agree that if Company makes any future material change to this Arbitration Agreement, you may reject that change within 30 days of such change becoming effective by writing Company at the following address: legal@docunlock.com, or by regular mail to PO Box 15683, San Francisco, CA 94115. Unless you reject the change within 30 days of such change becoming effective by writing to Company in accordance with the foregoing, your continued use of the Site and/or Services, including the acceptance of products and services offered on the Site following the posting of changes to this Arbitration Agreement constitutes your acceptance of any such changes. Changes to this Arbitration Agreement do not provide you with a new opportunity to opt out of the Arbitration Agreement if you have previously agreed to a version of these Terms and did not validly opt out of arbitration. If you reject any change or update to this Arbitration Agreement, and you were bound by an existing agreement to arbitrate Disputes arising out of or relating in any way to your access to or use of the Services or of the Site, any communications you receive, any products sold or distributed through the Site, the Services, or these Terms, the provisions of this Arbitration Agreement as of the date you first accepted these Terms (or accepted any subsequent changes to these Terms) remain in full force and effect. Company will continue to honor any valid opt outs of the Arbitration Agreement that you made to a prior version of these Terms.

Export. The Site may be subject to U.S. export control laws and may be subject to export or import regulations in other countries. You agree not to export, reexport, or transfer, directly or indirectly, any U.S. technical data acquired from Company, or any products utilizing such data, in violation of the United States export laws or regulations.

Disclosures. Company is located at the address listed below. If you are a California resident, you may report complaints to the Complaint Assistance Unit of the Division of Consumer Product of the California Department of Consumer Affairs by contacting them in writing at 400 R Street, Sacramento, CA 95814, or by telephone at (800) 952-5210.

Electronic Communications. The communications between you and Company use electronic means, whether you use the Site or send us emails, or whether Company posts notices on the Site or communicates with you via email. For contractual purposes, you (a) consent to receive communications from Company in an electronic form; and (b) agree that all terms and conditions, agreements, notices, disclosures, and other communications that Company provides to you electronically satisfy any legal requirement that such communications would satisfy if it were be in a hardcopy writing. The foregoing does not affect your non-waivable rights.

Entire Terms. These Terms constitute the entire agreement between you and us regarding the use of the Site. Our failure to exercise or enforce any right or provision of these Terms shall not operate as a waiver of such right or provision. The section titles in these Terms are for convenience only and have no legal or contractual effect. The word “including” means “including without limitation”. If any provision of these Terms is, for any reason, held to be invalid or unenforceable, the other provisions of these Terms will be unimpaired and the invalid or unenforceable provision will be deemed modified so that it is valid and enforceable to the maximum extent permitted by law. Your relationship to Company is that of an independent contractor, and neither party is an agent or partner of the other. These Terms, and your rights and obligations herein, may not be assigned, subcontracted, delegated, or otherwise transferred by you without Company’s prior written consent, and any attempted assignment, subcontract, delegation, or transfer in violation of the foregoing will be null and void. Company may freely assign these Terms. The terms and conditions set forth in these Terms shall be binding upon assignees.

APPENDIX A: List of Subprocessors

Subprocessor; Purpose; Location

Google Cloud Platform; Infrastructure hosting and AI/LLM processing; USA
Anthropic; AI/LLM processing; USA
OpenAI; AI/LLM processing; USA
PostHog; Product analytics; USA
HubSpot; CRM; USA
Sentry; Error monitoring; USA

DocUnlock ensures that each Subprocessor is bound by written data protection obligations no less protective than those set forth in these Terms and the Data Processing Agreement. Customer Data submitted to AI/LLM Subprocessors (Anthropic, Google and OpenAI) is processed solely for the purpose of providing the Service to Customer. DocUnlock has contractual commitments from these Subprocessors that Customer Data is not used for model training or improvement, and no opt-in for such use is offered. For the current status of Subprocessor data handling practices, or to subscribe to change notifications, contact privacy@docunlock.com.

APPENDIX B: Technical and Organizational Measures

Access Control: Role-based access controls, Multi-factor authentication required for employees, Regular access reviews.

Encryption: TLS 1.2+ for data in transit, AES-256 for data at rest.

Network Security: Firewalls and intrusion detection, DDoS mitigation, Network segmentation.

Physical Security: SOC 2 certified data centers, 24/7 monitoring and access controls.

Personnel: Background checks for employees with data access, Annual security training, Confidentiality agreements.

Incident Response: Documented incident response plan, 24/7 security monitoring, Regular tabletop exercises

Business Continuity: Regular backups with encryption, Disaster recovery plan, Annual recovery testing.

Cookies and Tracking Technologies: Use of analytics and tracking technologies as disclosed in the Cookie Policy (https://www.docunlock.com/legal/cookie-policy), cookie consent management platform for non-essential cookies, anonymization of IP addresses where technically feasible, respect for browser Do Not Track signals and Global Privacy Control.


Copyright/Trademark Information. Copyright © 2026 All rights reserved. All trademarks, logos and service marks (“Marks”) displayed on the Site are our property or the property of other third parties. You are not permitted to use these Marks without our prior written consent or the consent of such third-party which may own the Marks.

Notice. All notices to Customer may be provided by DocUnlock via email or account notification. All notices to DocUnlock must be sent to: Attn: LEGAL, legal@docunlock.com.

Contact Information

General: support@docunlock.com
Legal: legal@docunlock.com
Privacy: privacy@docunlock.com
Security: security@docunlock.com
Data Protection Officer: dpo@docunlock.com

DocUnlock, Inc.
PO Box 15683
San Francisco, CA 94115

Last Updated: January 1, 2026