Legora maintains a restrictive data processing agreement that limits third-party vendors