Contract documents — Terms of Service, Privacy Policy, Master Services Agreement, and Data Processing Addendum — are shared on request during pilot scoping and finalized with your counsel. BuildPaid is not yet SOC 2 certified; the Security & Governance Posture document above states our control posture and SOC 2 roadmap plainly.