Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Take this survey on AI-driven code security, vulnerability management, and autonomous remediation to help shape industry research →

STAR Registry Listing for

LHM Contratos

LHM Contratos

LHM Contratos is a contract lifecycle management (CLM) and tender-intelligence platform for Colombian law firms and legal departments, operated by González Páez Abogados S.A.S. as a SaaS with a separate database per customer.

What it does - Contract register with parties, amendments and versioned documents, each with a SHA-256 fingerprint. - Clause risk matrix against Colombian law (Ley 80/1993, Ley 1150/2007, Decreto 1082/2015, Código Civil), citing the literal legal text. - Monitoring of SECOP II public tenders (open data) and analysis of tender requirements. - Insurance policy (pólizas) sufficiency checks and expiry alerts. - Electronic signature with one-time codes (Ley 527/1999, Decreto 2364/2012), RFC 3161 timestamps and a hash-chained audit trail. - Payment milestones with DIAN electronic-invoice (CUFE) checks and signed webhooks to the customer's ERP.

Security - Each customer has its own database and database user; sessions are bound to the customer. - Optional TOTP second factor, enforceable per customer; append-only audit log. - AI analysis is pseudonymised before leaving the server, and providers are configured not to train on customer data where they offer that option. - Daily backups with an off-site copy and weekly automated restore tests.

Answers in this self-assessment describe only controls that exist in this service today.

View other services by González Páez Abogados S.A.S.:

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about LHM Contratos
Listed Since: 11/03/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed 1 day ago, on November 03, 2026.