Obligation Intelligence
Know which customer contract obligations your AI tools put at risk.
Breachwell reads your customer contracts and DPAs, tracks the breach-notification, subprocessor and data-location commitments in them, and shows where the tools your company uses put you out of line.
In early access. Built by a practising CISO.
The problem
AI tools are quietly becoming subprocessors.
Notetakers, writing assistants and AI features inside tools you already pay for process customer data. Your contracts often say you must tell customers first, get approval, or keep data in a specific region.
Silent subprocessors
New AI features arrive through a settings toggle or a product update, not through procurement. Nobody files a notice.
Commitments nobody tracks
Breach-notification windows, subprocessor approval rights and data-location limits sit in contracts and addenda spread across drives and inboxes.
Found at the worst time
During an incident or a customer audit, working out who must be told, and by when, is slow manual work you don't have time for.
What you get
One register for the commitments that matter.
Breachwell is in early access. If you want to shape it, start with a call.
Obligation extraction
AI reads contracts and DPAs and pulls out the security and privacy commitments, each with a citation to the clause it came from.
Subprocessor inventory
Keep a live list of the tools and vendors that process customer data, including AI tools.
Risk radar
Match your tools against every obligation and see which commitments they put at risk.
Breach notification drafts
When something goes wrong, see which customers must be told, by when, and start from a draft.
Start here
Start with a contract audit.
Send me one customer contract or DPA. I review it myself, with Breachwell, and you get:
- A register of the security and privacy obligations it contains, with clause references
- Which of your tools and subprocessors those obligations affect
- The gaps to fix first, walked through in a short call
€500 per contract, excl. VAT
Fixed price. Your contract stays confidential, and I'm happy to sign your NDA first.
About
Built by someone who works with these contracts.
Breachwell is built by Joost Kouters, an information security leader certified in CISSP, CISM, CRISC, CISA and AAISM, who deals with customer security requirements in practice.
Want to see it on your own contracts?
Twenty minutes, no slides.
Request a 20-minute call