Contract lifecycle (CLM)
End-to-end contract management platforms with AI drafting, negotiation, or analytics features. As of 2026-09-04, 18 independent tools are recorded in this category; 8 publish a commitment not to train on customer data and 0 have third-party accuracy evidence.
documented yes documented no not disclosed
| Tool | Built for | No-train | SOC 2 | ISO 27001 | ISO 42001 | ZDR | Accuracy evidence | Incidents on record | Last checked |
|---|---|---|---|---|---|---|---|---|---|
AgiloftAgiloft, Inc. · HQ US No-code CLM with generative AI; states contracts are never used to train AI models and publishes a subprocessor list naming OpenAI, Azure AI and AWS Bedrock regions. | In-house legal, Mid-sized firms | No training on customer data for Agiloft: documented yes | SOC 2 report or certification for Agiloft: documented yes | ISO 27001 certification for Agiloft: documented yes | ISO 42001 AI-management certification for Agiloft: not disclosed | Zero retention with model providers for Agiloft: not disclosed | none | 0 | 2026-09-04 |
AvvokaAvvoka · HQ GB Document automation and negotiation platform with AI template curation; connects to Claude; partnerships with Harvey and Legora; ISO 27001 certified continuously since October 2017. | Large firms, In-house legal | No training on customer data for Avvoka: not disclosed | SOC 2 report or certification for Avvoka: not disclosed | ISO 27001 certification for Avvoka: documented yes | ISO 42001 AI-management certification for Avvoka: not disclosed | Zero retention with model providers for Avvoka: not disclosed | none | 0 | 2026-09-04 |
Conga CLM (Conga AI)Conga · HQ US Revenue lifecycle and CLM suite; its AI Addendum bars training foundation models on customer data and names Azure OpenAI, Google Vision, AWS Textract and Zuva as AI providers. | In-house legal | No training on customer data for Conga CLM (Conga AI): documented yes | SOC 2 report or certification for Conga CLM (Conga AI): documented yes | ISO 27001 certification for Conga CLM (Conga AI): documented yes | ISO 42001 AI-management certification for Conga CLM (Conga AI): not disclosed | Zero retention with model providers for Conga CLM (Conga AI): not disclosed | none | 0 | 2026-09-03 |
ContractbookContractbook ApS (Scrive) · HQ DK SMB and mid-market CLM with AI import and a contract assistant; SOC 2 Type II; eIDAS e-signature; DPA available; now part of Scrive. | Mid-sized firms, Small firms & solos, In-house legal | No training on customer data for Contractbook: not disclosed | SOC 2 report or certification for Contractbook: documented yes | ISO 27001 certification for Contractbook: not disclosed | ISO 42001 AI-management certification for Contractbook: not disclosed | Zero retention with model providers for Contractbook: not disclosed | none | 0 | 2026-09-03 |
Docusign Intelligent Agreement Management (Docusign AI)Docusign, Inc. · HQ US Agreement platform combining Docusign CLM and AI (Navigator, Iris) and absorbing Lexion's technology; trust page displays ISO 42001 alongside ISO 27001 and SOC 2. | In-house legal, Mid-sized firms, Small firms & solos | No training on customer data for Docusign Intelligent Agreement Management (Docusign AI): not disclosed | SOC 2 report or certification for Docusign Intelligent Agreement Management (Docusign AI): documented yes | ISO 27001 certification for Docusign Intelligent Agreement Management (Docusign AI): documented yes | ISO 42001 AI-management certification for Docusign Intelligent Agreement Management (Docusign AI): documented yes | Zero retention with model providers for Docusign Intelligent Agreement Management (Docusign AI): not disclosed | none | 0 | 2026-09-03 |
Evisort (Workday Contract Intelligence)Workday, Inc. · HQ US Contract intelligence platform 'powered by Evisort AI', sold as Workday Contract Intelligence since the Sept 2024 acquisition; custom AI models for extraction and obligation tracking. | In-house legal | No training on customer data for Evisort (Workday Contract Intelligence): not disclosed | SOC 2 report or certification for Evisort (Workday Contract Intelligence): not disclosed | ISO 27001 certification for Evisort (Workday Contract Intelligence): documented yes | ISO 42001 AI-management certification for Evisort (Workday Contract Intelligence): documented yes | Zero retention with model providers for Evisort (Workday Contract Intelligence): not disclosed | none | 0 | 2026-09-03 |
Icertis Contract IntelligenceIcertis, Inc. · HQ US Enterprise CLM with AI copilots; unusually broad compliance set including FedRAMP High, TISAX, ITAR and NIST 800-171; publishes an AI governance document via its trust centre. | In-house legal | No training on customer data for Icertis Contract Intelligence: not disclosed | SOC 2 report or certification for Icertis Contract Intelligence: documented yes | ISO 27001 certification for Icertis Contract Intelligence: documented yes | ISO 42001 AI-management certification for Icertis Contract Intelligence: not disclosed | Zero retention with model providers for Icertis Contract Intelligence: not disclosed | none | 0 | 2026-09-03 |
Ironclad (Ironclad AI / Jurist)Ironclad, Inc. · HQ US Enterprise CLM with Ironclad AI and the multi-LLM 'Jurist' assistant for review, drafting and research in native .docx; customers are opted out of Ironclad model training by default. | In-house legal | No training on customer data for Ironclad (Ironclad AI / Jurist): documented yes | SOC 2 report or certification for Ironclad (Ironclad AI / Jurist): documented yes | ISO 27001 certification for Ironclad (Ironclad AI / Jurist): documented yes | ISO 42001 AI-management certification for Ironclad (Ironclad AI / Jurist): not disclosed | Zero retention with model providers for Ironclad (Ironclad AI / Jurist): documented yes | none | 1 | 2026-09-03 |
JuroJuro Online Ltd · HQ GB Browser-native CLM with an AI Assistant and agentic redlining; MCP integration with ChatGPT (Oct 2025); SOC 2 Type II attested. | In-house legal, Mid-sized firms | No training on customer data for Juro: not disclosed | SOC 2 report or certification for Juro: documented yes | ISO 27001 certification for Juro: not disclosed | ISO 42001 AI-management certification for Juro: not disclosed | Zero retention with model providers for Juro: not disclosed | none | 0 | 2026-09-03 |
Leah (formerly ContractPodAi)ContractPodAi Ltd · HQ GB ContractPodAi rebranded as Leah: enterprise legal AI and CLM platform with a single-tenant option; states customer contract data is never used to train models. | In-house legal | No training on customer data for Leah (formerly ContractPodAi): documented yes | SOC 2 report or certification for Leah (formerly ContractPodAi): documented yes | ISO 27001 certification for Leah (formerly ContractPodAi): not disclosed | ISO 42001 AI-management certification for Leah (formerly ContractPodAi): not disclosed | Zero retention with model providers for Leah (formerly ContractPodAi): not disclosed | none | 0 | 2026-09-03 |
LexionDocusign, Inc. · HQ US AI contract management platform acquired by Docusign in May 2024 (reported $165M); its technology now feeds Docusign Intelligent Agreement Management. Security page still live. | In-house legal | No training on customer data for Lexion: not disclosed | SOC 2 report or certification for Lexion: documented yes | ISO 27001 certification for Lexion: documented yes | ISO 42001 AI-management certification for Lexion: not disclosed | Zero retention with model providers for Lexion: not disclosed | none | 0 | 2026-09-03 |
LinkSquares (LinkAI)LinkSquares, Inc. · HQ US CLM with proprietary 'LinkAI' trained exclusively on legal documents and announced autonomous agents; multi-tenant and single-tenant AWS hosting in the US. | In-house legal | No training on customer data for LinkSquares (LinkAI): not disclosed | SOC 2 report or certification for LinkSquares (LinkAI): documented yes | ISO 27001 certification for LinkSquares (LinkAI): documented yes | ISO 42001 AI-management certification for LinkSquares (LinkAI): not disclosed | Zero retention with model providers for LinkSquares (LinkAI): not disclosed | vendor | 0 | 2026-09-03 |
Miramis (formerly Pocketlaw)Pocketlaw AB · HQ SE Pocketlaw rebranded as Miramis: AI-native contract platform to create, negotiate, sign and store contracts with the 'Miramis AI' agent; 1,000+ teams. | In-house legal, Small firms & solos | No training on customer data for Miramis (formerly Pocketlaw): documented yes | SOC 2 report or certification for Miramis (formerly Pocketlaw): documented yes | ISO 27001 certification for Miramis (formerly Pocketlaw): documented yes | ISO 42001 AI-management certification for Miramis (formerly Pocketlaw): not disclosed | Zero retention with model providers for Miramis (formerly Pocketlaw): not disclosed | none | 0 | 2026-09-03 |
OntraOntra, Inc. · HQ US Contract automation and intelligence for private markets (NDAs, side letters); zero-data-retention agreements with all third-party LLM providers; pursuing ISO 42001. | In-house legal | No training on customer data for Ontra: documented yes | SOC 2 report or certification for Ontra: documented yes | ISO 27001 certification for Ontra: documented yes | ISO 42001 AI-management certification for Ontra: not disclosed | Zero retention with model providers for Ontra: documented yes | none | 0 | 2026-09-03 |
PreciselyPrecisely · HQ SE Governance-focused CLM with 'Precisely AI'; EU-hosted with custom in-country hosting available. Only facility-level ISO 27001 claims were found. | In-house legal, Mid-sized firms | No training on customer data for Precisely: not disclosed | SOC 2 report or certification for Precisely: not disclosed | ISO 27001 certification for Precisely: not disclosed | ISO 42001 AI-management certification for Precisely: not disclosed | Zero retention with model providers for Precisely: not disclosed | none | 0 | 2026-09-03 |
Sirion (SirionAI)Sirion (SirionLabs) · HQ US AI-native enterprise CLM; trust centre lists ISO 27001:2022 and SOC 1/2 and publishes an AI policy aligned to the NIST AI RMF. Trust-centre pages blocked direct fetches. | In-house legal | No training on customer data for Sirion (SirionAI): not disclosed | SOC 2 report or certification for Sirion (SirionAI): documented yes | ISO 27001 certification for Sirion (SirionAI): documented yes | ISO 42001 AI-management certification for Sirion (SirionAI): not disclosed | Zero retention with model providers for Sirion (SirionAI): not disclosed | none | 0 | 2026-09-03 |
SpotDraft (VerifAI)SpotDraft · HQ IN CLM with VerifAI contract review in Word; publishes 'AI nutrition facts' naming OpenAI GPT-4; Google Cloud hosting with US, EU, India and Middle East regions. | In-house legal, Mid-sized firms | No training on customer data for SpotDraft (VerifAI): documented yes | SOC 2 report or certification for SpotDraft (VerifAI): documented yes | ISO 27001 certification for SpotDraft (VerifAI): not disclosed | ISO 42001 AI-management certification for SpotDraft (VerifAI): not disclosed | Zero retention with model providers for SpotDraft (VerifAI): not disclosed | vendor | 0 | 2026-09-03 |
SummizeSummize Ltd. · HQ GB Contract intelligence that 'wraps around' Word, Teams and Slack with SIA agents; Azure-hosted and ISO 27001 certified; SOC 2 stated as a future intention. | In-house legal | No training on customer data for Summize: documented yes | SOC 2 report or certification for Summize: not disclosed | ISO 27001 certification for Summize: documented yes | ISO 42001 AI-management certification for Summize: not disclosed | Zero retention with model providers for Summize: not disclosed | none | 0 | 2026-09-03 |
Vendor names and logos are the property of their owners and are shown solely to identify the vendor's product. SafeLegalAI is not affiliated with, endorsed by or sponsored by any listed vendor, except where a record is labelled an affiliated product. Facts are recorded from vendors' published pages; no ranking, rating or recommendation is implied.