1. Overview of the Service
Clasp is a cloud-based legal operations and document management platform designed to support workflow automation, matter organization, document handling, billing, communications, and related operational functions. The Service is delivered as a hosted, multi-tenant software platform accessible through a web interface.
The Service is provided under the standard Subscription Plan without subscription or per-User fees, unless an Order Form states otherwise. The Service includes only the features and functionality made available by Clasp as of the Effective Date or expressly stated in an Order Form. The Service does not include any future features, modules, or enhancements unless separately purchased or agreed in writing.
2. Core Platform Components
2.1 Document Management
The Service provides tools for uploading, organizing, viewing, and sharing documents. Supported ingestion methods include:
- direct user upload
- imports from Google Drive, Dropbox, and OneDrive
- client portal uploads
- email ingestion
- Connectors enabled by Customer (see Section 3)
- migrations performed by a third-party migration provider (see Section 11)
Documents are processed using OCR (via Unstructured.io) for text extraction and indexing. OCR is read-only and does not modify document content.
2.2 Matter & Workflow Organization
The Service supports matter-level organization, including:
- matter folders
- task tracking
- document grouping
- lightweight activity logs showing significant actions
The Service does not currently include a customer-facing audit log module or reporting suite.
2.3 Search & Retrieval
Search functionality is supported through metadata, OCR-extracted text, and stored embeddings. Embeddings may persist until configurable deletion logic is implemented. Search does not transmit Customer Data to external large language models.
2.4 Public Sharing
Customer may share documents using:
- time-limited signed URLs
- email-based invitations
Public sharing is Customer-controlled. Clasp is not responsible for mis-addressed or forwarded links or access by recipients selected by Customer.
2.5 Document Editing
The Service may allow Users to open and edit certain documents in a browser-based editor through an integration with Microsoft Word for the web. Documents opened for editing are processed by Microsoft as described in Appendix H.
2.6 Billing, Payments, and Trust Accounting
The Service includes record-keeping tools for time and expense tracking, invoicing, payment recording, and the recording and tracking of client trust account activity. Payments may be accepted through third-party Payment Processors (such as Confido), and Customer may enable integrations with accounting platforms such as QuickBooks Online. These tools are record-keeping and workflow aids. Customer’s responsibilities, and Clasp’s limitations, are described in Section 2.10 of the Master Services Agreement. Clasp is compensated through Payment Fees on Client Payments and disbursements processed through the Service, as described in Section 4 of the Master Services Agreement.
2.7 Messaging and Notifications
The Service includes in-application and client portal messaging, text (SMS) messaging through a third-party messaging provider, email notifications, and push or in-application notifications. Customer and its Users decide what information they share through messaging features. Customer’s responsibilities for messaging are described in Section 2.11 of the Master Services Agreement.
2.8 Client Portal and E-Signature
The Service includes a client portal through which Customer may share documents, exchange messages, and request electronic signatures from its clients. E-Signature Functionality is described in Section 4. Clients, third parties, and other invitees use the client portal and e-signature features under Clasp’s Portal and E-Signature Terms of Use.
3. AI-Assisted Functionality and Connectors
AI-Assisted Functionality consists of internal components that operate on metadata, embeddings, or derived representations of Customer Data. These components may support:
- search relevance
- document organization
- workflow efficiency
- draft time-entry suggestions based solely on metadata
AI-Assisted Functionality:
- does not access document text
- does not perform automated decision-making
- does not generate legal advice, legal analysis, or document drafts
Time Capture. Time Capture is an optional module. When Customer elects to enable both Time Capture and AI processing for Time Capture, Clasp sends system-generated metadata (not document text) to OpenAI to generate draft time-entry descriptions, as described in Appendix H. Except for Time Capture, the Service does not transmit Customer Data to external large language models and does not include generative AI features.
Connectors. Clasp may make available a Model Context Protocol (MCP) connector or similar interface. Connectors contain no native AI. Customer and its Users choose whether to use a Connector, which third-party AI service to connect, and what access to grant. Connected AI Services are Third-Party Services, as described in Section 7.7 of the Master Services Agreement.
All outputs require human review and approval. AI-Assisted Functionality is further described in Section 7 of the Master Services Agreement.
4. E-Signature Functionality
The Service includes an electronic signature module that allows Users to prepare, send, and execute documents electronically. E-Signature Functionality:
- is provided solely for convenience
- is not a certified or qualified electronic signature system
- does not include identity verification, notarization, or witness services
- locks documents upon completion, creating immutable records that cannot be deleted or altered by Users (they are deleted only if the workspace is deleted).
Clasp does not represent or warrant compliance with ESIGN, UETA, or any state-specific electronic signature requirements.
5. Integrations
The Service may interoperate with certain Third-Party Services, including:
- cloud storage providers (Google Drive, Dropbox, OneDrive)
- email, calendar, and video-meeting services
- authentication services (email OTP delivery and “Sign in with Google”)
- OCR vendors
- messaging and notification services
- payment processors and accounting platforms
- Microsoft Word for the web
- Connectors and Connected AI Services selected by Customer
Integrations are provided as-is. Customer’s use of Third-Party Services is governed solely by those providers’ terms. Clasp is not responsible for outages, configuration changes, or performance issues caused by Third-Party Services.
6. Hosting & Storage Architecture
Documents and files are stored in Google Cloud Storage in per-organization buckets. Structured application data, account data, and embeddings are stored in a managed database hosted by Supabase. Clasp selects hosting regions and configurations; region selection is not configurable by Customer.
Clasp may retain prior versions of documents and records for its own operational purposes. Prior versions are not accessible to Customer through the Service unless Clasp expressly makes them available, and Clasp does not guarantee that any prior version exists or can be restored.
Clasp does not provide:
- multi-region replication
- disaster recovery RTO/RPO guarantees
- secondary backup sites
- customer-accessible backups or point-in-time restoration
- cold-storage tiers (unless introduced in the future)
7. Security Architecture (Summary)
A detailed description of Clasp’s security measures is provided in Appendix B (Security Baseline). The Service includes:
- encryption at rest using Clasp’s cloud infrastructure
- OTP-based authentication and “Sign in with Google”
- role-based access controls (Firm User, Admin, Super Admin)
- enterprise-grade secrets management
- administrative, technical, and physical safeguards consistent with Appendix B
Clasp does not currently represent or warrant compliance with SOC 2, ISO 27001, GDPR, HIPAA, CCPA, or any other regulatory framework. Clasp uses these frameworks as guides and is working toward alignment with them, as described in Section 5.7 of the Master Services Agreement.
Clasp does not currently provide customer-managed encryption keys. If introduced in the future, such features may limit or disable certain functionality.
8. Environments
The Service is delivered to Customer from a production environment. Clasp maintains separate non-production environments for its own development and testing, which are not made available to Customers. Clasp does not provide:
- sandbox environments
- staging or development environments for Customer use
- customer-specific environment provisioning
9. Usage Model
The Service is provided without subscription or per-User fees. Clasp is compensated through Payment Fees, as described in Section 4 of the Master Services Agreement. Workspaces that do not process Client Payments, or that do not complete Firm Verification, may be deleted after notice and with a data export, as described in Section 16.7 of the Master Services Agreement.
Subject to reasonable use as described in the Acceptable Use Policy, the Service does not impose:
- storage limits
- bandwidth limits
- API usage limits
- file size limits
- retention caps
unless expressly stated in an Order Form.
10. Support
Support commitments, if any, are defined exclusively in Appendix E (Support & SLAs). Appendix A does not create or imply any support obligations.
11. Professional Services and Migration
Clasp does not provide:
- onboarding
- implementation
- configuration
- custom development
- IT support
- data migration
unless separately agreed in a signed Order Form or other written agreement. Clasp does not perform, manage, or participate in data migrations. Customer may engage an independent third-party migration provider, as described in Section 2.12 of the Master Services Agreement.
12. Limitations & Exclusions
The Service does not include:
- generative AI (other than optional Time Capture AI processing)
- automated decision-making
- audit log reporting modules
- custom development
- data migration services
- future functionality commitments
- DR/BCP guarantees
- multi-region hosting
- sandbox or staging environments for Customer use
- enterprise integrations not expressly supported
- any feature not available as of the Effective Date unless separately purchased
Clasp is not responsible for outages, configuration changes, or performance issues caused by Third-Party Services.
Practice-area labels and similar settings (such as “Personal Injury”) are organizational labels only. They do not change how the Service processes or protects data.
13. Documentation
Clasp may provide user guides, technical documentation, and other materials describing the Service. Documentation is for informational purposes only and does not create contractual commitments.