Skip to main content
v1.2.2Last Updated: Apr 22, 2026

Privacy Policy

In a nutshell

What this document is:
This privacy policy explains how personal data may be processed when using the Clawscan platform and the Clawscan website.

Why this matters:
Clawscan is designed so that the analysis of communications occurs within the client’s own environment. As a result, GOlegal generally does not process the personal data contained in communications analyzed by the system.

Who should read this:
Users of the Clawscan website, organizations evaluating the platform, and individuals seeking information about Clawscan's data protection practices.

When to use this:
When evaluating Clawscan, using the Clawscan website, or reviewing the data protection framework applicable to the platform.

1. Controller​

The Clawscan platform is developed and operated by:

GOlegal
Avenue Louise 523
1050 Brussels
Belgium

For privacy-related inquiries:

privacy@golegal.law

2. Scope of this policy​

This privacy policy applies to:

  1. Personal data processed through the Clawscan website
  2. Limited operational data processed by GOlegal when providing the Clawscan service
  3. Personal data processed when interacting with GOlegal (e.g. maintenance, support or onboarding)

This policy does not cover communications processed within a client’s Microsoft 365 environment, which remain under the control of the client organization.

See:

3. Processing of communications​

Clawscan analyzes communications within the client’s Microsoft 365 and Azure environment.

This means that:

  • email content remains within the client tenant
  • GOlegal infrastructure does not receive email bodies or attachments
  • GOlegal does not access communication content analyzed by the system

As a result, the organization deploying Clawscan remains responsible for the governance of communications processed within its environment.

See:

4. Operational data processed by GOlegal​

To operate the Clawscan platform, limited operational information may be transmitted to GOlegal systems.

This may include:

  • compliance risk classifications generated by the system
  • risk scores
  • operational telemetry
  • system diagnostics
  • licensing and usage information

This information does not include raw communication content.

Operational data is used solely to operate and maintain the service.

See:

5. Situations where GOlegal may process personal data​

GOlegal may process limited personal data in certain situations, including:

  • account creation or onboarding
  • support requests
  • maintenance or troubleshooting
  • contractual administration

Such data typically includes professional contact information (e.g. name, email address, organization).

Processing in these contexts is limited to what is necessary to provide the service.

Personal data processed by GOlegal may rely on the following legal bases:

  • performance of a contract with client organizations
  • legitimate interests in maintaining and securing the platform
  • legal obligations where applicable

Client organizations remain responsible for determining the legal basis applicable to communications analyzed within their own environment.

See:

7. Data retention​

Operational data retained by GOlegal is subject to defined retention policies.

Derived scan results may be retained for a limited period before deletion.

Aggregated operational statistics may be retained longer for statistical & service monitoring purposes.

See:

8. Subprocessors​

GOlegal may rely on certain service providers to operate parts of the Clawscan platform.

These providers process limited operational data strictly for the purpose of supporting the service.

A list of subprocessors is available at:

9. Data subject rights​

Individuals may have rights under applicable data protection laws, including:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to object to processing

Requests relating to personal data processed by GOlegal may be sent to:

privacy@golegal.law

Requests relating to communications processed within an organization's environment should be addressed to the organization operating Clawscan.

10. Security measures​

GOlegal implements technical and organizational measures designed to protect operational data processed as part of the Clawscan service.

Details regarding these measures are described in:

11. Changes to this policy​

This privacy policy may be updated periodically to reflect changes in the service or applicable regulations.

The latest version will always be available in the Clawscan Trust Center.

Last updated on