L3 Legal · DPA
Data Processing Addendum.
Our DPA governs how we process data on your behalf. The current executable version is available to customers and evaluators on request.
Scope and roles
The DPA defines the controller/processor relationship: you control the content you bring to Leela, and Humblepaper, Inc. processes it on your behalf, only to provide the service.
Processing and purpose
Deal content is processed solely to perform the work you ask of Leela: review, drafting, and negotiation support. It is not used to train models and is not sold or shared for any other purpose.
Security measures
Technical and organizational measures include encryption in transit and at rest and role-based access controls. The Security page describes our current posture.
Subprocessors
We maintain a current, public list of subprocessors. The executable DPA sets out how we engage them and how changes are communicated.
Data subject requests
We provide reasonable assistance with access, correction, and deletion requests concerning the data we process for you.
International transfers
Where processing crosses borders, the executable DPA documents the safeguards relied on.