Clasp Legal Technologies Trust Center

An up to date list of controls published internally by Clasp Legal Technologies.

• Acceptable Use
• Access Rights
• AI Awareness
• AI Change Planning
• AI Communication
• AI Competence
• AI Concern Reporting
• AI Continual Improvement
• AI Customers
• AI Data Acquisition
• AI Data Preparation
• AI Data Provenance
• AI Data Quality
• AI Data Resources
• AI External Reporting
• AI Human Resources
• AI Incident Communication
• AI Interested Parties
• AI Internal Audit
• AI Leadership Commitment
• AI Management Review
• AI Management System Establishment
• AIMS Documented Information
• AIMS Scope Definition
• AI Nonconformity and Corrective Action
• AI Objectives and Planning
• AI Operational Planning and Control
• AI Organizational Context
• AI Organizational Roles, Responsibilities and Authorities
• AI Performance Monitoring, Measurement, Analysis and Evaluation
• AI Policy
• AI Policy Alignment with Other Organizational Policies
• AI Policy Review
• AI Resource Documentation
• AI Resources
• AI Risk and Opportunity Actions
• AI Risk Assessment
• AI Risk Treatment
• AI Suppliers
• AI System and Computing Resources
• AI System Deployment
• AI System Design and Development Documentation
• AI System Documentation and Information for Users
• AI System Event Logging
• AI System Impact Assessment Documentation
• AI System Impact Assessment Process
• AI System Operation and Monitoring
• AI System Requirements and Specification
• AI System Technical Documentation
• AI System Verification and Validation
• AI Third-Party Responsibility Allocation
• AI Tooling Resources
• Assessing AI System Impact on Individuals and Groups
• Assessing Societal Impacts of AI Systems
• Asset Inventory
• Authorized Agent Process
• Automated Decision-Making Safeguards
• Business Associate Management
• Business Continuity & ICT Readiness
• CCPA-Compliant Privacy Policy
• CCPA Privacy Training Program
• Change management
• Configuration & Patch Management
• Consumer Identity Verification Procedure
• Consumer Request Records Retention
• Contingency Plan Operations
• Credential Management
• Data Breach Notification Process
• Data Encryption
• Data for AI Development and Enhancement
• Data Inventory and Mapping
• Data Masking
• Data Minimization, Encryption, and Pseudonymization
• Data Privacy
• Data Processing Agreements with Third Parties
• Data Protection Impact Assessment Process
• Data Retention & Destruction
• Data Subject Rights Request Workflow
• Device & Media Controls
• Disaster Recovery Planning
• Disciplinary process
• "Do Not Sell or Share My Personal Information" Link
• Encrypted Data at Rest
• Encryption Key Management
• Endpoint Protection
• Endpoint Security
• GDPR Accountability Roles and Representatives
• HIPAA Security Program Governance
• Human Resources Security
• Information Classification
• Information for Interested Parties
• Information Security Policy and Awareness Training
• Intended Use of AI System
• Internal Audit & Management Review
• ISO 42001
• Lawful Basis Register
• Legal, Regulatory & IP Compliance
• Management Security Accountability
• Minor Consent Management
• Network Security
• Notice at Collection
• Notice of Financial Incentive
• Organization Structure & Reporting Lines
• Periodic CCPA Compliance Audit
• Personal Data Breach Response Procedure
• Personal Information Inventory and Data Flow Mapping
• Personnel Security
• Physical Access Control
• Physical & Environmental Security
• Physical Facility Security
• Policy Compliance
• Privacy by Design and by Default
• Privacy Notice
• Prominent Privacy Policy Display
• Reasonable Security Safeguards for Personal Information
• Regulatory Liaison
• Remote-Work Security
• Resource Capacity Management
• Responsible AI Development Objectives
• Responsible AI Use Objectives
• Responsible AI Use Processes
• Right to Correct Process
• Right to Delete Process
• Right to Know Process
• Right to Limit Use of Sensitive Personal Information
• Right to Non-Discrimination
• Right to Opt-Out of Sale or Sharing
• Risk Analysis & Management
• Risk Management
• Risk Management
• Secure Data Transfer
• Secure SDLC Integration
• Security Awareness & Training
• Security Governance Roles
• Security Incident Management
• Security Logging
• Security Monitoring & Detection
• Segregation of duties
• Service Provider and Contractor Agreements
• Standard Operating Procedures (SOPs)
• Supplier Security
• Supplier & Third-Party Security
• Trustworthy AI Design and Development Processes
• Utility Tool monitoring
• Vulnerability Management
• Workforce Security & Sanctions