Privacy Policy
Last updated: July 17, 2026
1. Current public service
Koho Consulting, LLC (“Koho”) operates this site. Public document uploads are paused. The site currently collects business contact and migration-fit information only; it does not accept or process customer contract documents.
Do not place confidential contract language, personal data, or protected health information in the request form.
2. Information collected
The benchmark-request form collects name, business email, company, role, target CLM, contract-volume range, migration timeline, target fields, document challenges, and consent. The requester IP is processed transiently for abuse prevention but is not stored in the benchmark lead record. No payment data or contract files are collected.
3. Use and retention
Koho uses request information to assess fit and respond about its services. With consent, request metadata may remain for up to 90 days after submission unless a customer relationship or legal obligation requires documented longer retention.
If a controlled assessment is later authorized under an NDA, DPA, or SOW, raw files, derived extraction data, and hosted scorecards default to deletion within seven days of upload unless those written terms establish a different period.
4. Service providers
The request site may use Vercel for hosting, Supabase for database services, Cloudflare for abuse prevention, Upstash for rate limiting, and Resend for notifications. Some providers publish independent security or compliance reports through their own trust centers.
Benchmark notification email contains only a random request ID, not the contact or migration details stored in the lead record. Koho personnel use the restricted lead store to review those details.
A provider’s certification applies to that provider’s scoped service. It does not mean that Koho, Excerpa, or this benchmark is SOC 2, ISO 27001, HIPAA, or otherwise certified.
5. Document processing
No public document processing is active. Before Koho requests documents, it will identify the approved transfer method, subprocessors, regions, retention terms, and any required contractual safeguards. Koho will not accept PHI through this site.
6. Your choices
To request access, correction, or deletion, contact privacy@kohoconsulting.com. Koho may need to verify your identity before fulfilling a request.