List of Subprocessors
At Sonar Legal, we prioritize data privacy & security and minimize reliance on third-party subprocessors wherever possible. Our add-in is designed to run primarily on the user's local machine, with minimal cloud dependencies. However, certain functionalities require secure cloud-based services to ensure seamless operation.
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Hosting the add-in manifest and authentication services | Singapore |
| Jina AI GmbH | Knowledge Base Embeddings | Germany |
Hosting and Infrastructure
We use Google Cloud Platform (GCP) in Singapore to host essential backend services, including:
- The manifest file required for the Office.js add-in installation.
- Authentication services to manage user access securely.
Embeddings
We utilize Jina AI (Berlin, Germany) for knowledge base embeddings, selected for its enterprise-grade security architecture and compliance with international data protection standards. Jina AI implements AES-256 encryption for data at rest and TLS 1.2+ for data in transit, with all embeddings processed through SOC 2 Type II-certified infrastructure.
Large Language Models (LLMs)
To provide AI-driven features such as legal drafting, review, and formatting, Sonar Legal integrates with third-party large language models (LLMs). These AI models process user input in real-time. We do not store or retain customer data beyond the immediate request.
The following providers may be used, depending on the user configuration:
- Microsoft Azure OpenAI
- Google Vertex AI
- Anthropic Claude API
- OpenAI API
- OpenRouter API