Every signed agreement, read against your customers' regimes.
Paste the list of customer agreements you have signed. Get, per agreement, the regimes your customer's sector pulls onto you, the clauses those regimes expect the agreement to carry, quoted and cited, the agreements missing a DPA, BAA or security schedule, the breach-notice clocks that disagree across your customers, every audit right you have granted, and the renewals and notice windows inside 90 days.
| Item and customer | Agreement | Expected, and what the row shows | Clock |
|---|---|---|---|
| 1.01Bank, Irelandclocks disagree | Outsourcing | processor termsDORA termssecurity schedule | 4h |
| 1.04Insurer, Swedenno DORA terms shown | SaaS subscription | processor termsDORA termsaudit right | 72h |
| 1.09Insurer, UKno DPA shown | Outsourcing | processor termsaudit rightbreach clock | without undue delay |
| 1.11Hospital, USno BAA shown | SaaS subscription | BAAaudit rightbreach clock | 72h |
| 1.16Retailer, California | SaaS subscription | processor termsaudit rightbreach clock | 72h |
| 1.20Super fund, Australianotice missed | Outsourcing | CPS 230 termssecurity scheduleaudit right | without undue delay |
| 1.30Members guild, Irelandunrecognised | Comfort letter | not placed | not stated |
| 30 agreements | 29 classified | 7 distinct clocks, 4h to 168h | 11 audit rights |
Paste the agreements you already have
The contract database export, the sales-ops sheet or a line per customer from memory: one agreement per line, a customer on as many lines as it has agreements. Every line is matched against a published dictionary of 40 agreement types in six families and 25 customer sectors, in 70 countries; a line that matches nothing is marked unrecognised and never guessed.
Read what each customer pulls onto you
Per agreement: the regimes the customer's sector and country pull on, each with its reason in a sentence (a bank in Ireland is a financial entity under DORA, a hospital in the United States is a covered entity under HIPAA), the terms those regimes expect an agreement of that kind to carry, and a box for each: ticked where the row shows it, open where it does not say.
Take the clocks and the questions to the next negotiation
The breach-notice clocks across every customer, shortest first, beside each customer's own clock to its regulator; every audit right you have granted; the renewals and notice dates inside 90 days; and the questions to take to counsel, grouped by finding, each with the clause behind it.
Why a register and not a contract review
A review firm prices per agreement and arrives next quarter. The legal operations lead is asked in this week's negotiation which breach-notice clock the company has already promised to whom, and which customers hold an audit right, and the answer sits in a spreadsheet that does not say. Before anyone reads an agreement again, somebody has to say what each customer's regimes expect and what the row records. That is the register this builds, in your browser, from the list you already hold.