Spellbook
Rally Legal · Uncategorised · CA · spellbook.com
services/spellbook.yamlVendor data-handling terms
The privacy policy does not say whether contract text is used to train models. Spellbook's marketing pages describe zero-data-retention agreements with OpenAI and Anthropic; that claim is not in the policy and is not verified here.
“We may use your Personal Information for research and development purposes, including to analyze and improve the Spellbook AI Platform and our business.”
“We retain your Google User Data (including derived data, metadata, and access tokens) only for as long as you maintain the corresponding Spellbook library.”
“Your Personal Information may be stored or transferred or other locations where privacy laws may not be as protective as those in your state, province, or country; however, we will ensure our storage or transfers comply with applicable laws around your Personal Information.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.spellbook.legal | api | observed |
| spellbook.legal | app | observed |
Assessment
Reasoning: A contract-drafting add-in for Microsoft Word used by legal teams. Contracts are among the most sensitive documents a company holds, and the public policy does not address training on them, retention of them, or where they are processed. The vendor's security claims live on marketing pages and in the contract. Use only under a signed agreement.
Flags: Training-use and retention of contract text not in the policy · Storage region not stated · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Use, retention and transfer terms verified against the Spellbook privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.