Contract lifecycle (CLM)
End-to-end contract management platforms with AI drafting, negotiation, or analytics features. As of 2026-10-07, 18 independent tools are recorded in this category; 10 publish a commitment not to train on customer data and 0 have third-party accuracy evidence.
documented yes documented no not disclosed
| Tool | Built for | No-train | SOC 2 | ISO 27001 | ISO 42001 | ZDR | Accuracy evidence | Incidents on record | Last checked |
|---|---|---|---|---|---|---|---|---|---|
AgiloftAgiloft, Inc. · HQ US No-code CLM with generative AI; states contracts are never used to train AI models and publishes a subprocessor list naming OpenAI, Azure AI and AWS Bedrock regions. | In-house legal, Mid-sized firms | No training on customer data for Agiloft: documented yes | SOC 2 report or certification for Agiloft: documented yes | ISO 27001 certification for Agiloft: documented yes | ISO 42001 AI-management certification for Agiloft: not disclosed | Zero retention with model providers for Agiloft: not disclosed | none | 0 | 2026-09-04 |
AvvokaAvvoka · HQ GB Document automation and negotiation platform with AI template curation; connects to Claude; partnerships with Harvey and Legora; ISO 27001 certified continuously since October 2017. | Large firms, In-house legal | No training on customer data for Avvoka: not disclosed | SOC 2 report or certification for Avvoka: not disclosed | ISO 27001 certification for Avvoka: documented yes | ISO 42001 AI-management certification for Avvoka: not disclosed | Zero retention with model providers for Avvoka: documented yes | none | 0 | 2026-09-04 |
Conga CLM (Conga AI)Conga · HQ US Revenue lifecycle and CLM suite; its AI Addendum bars training foundation models on customer data and names Azure OpenAI, Google text recognition and Zuva as AI providers. | In-house legal | No training on customer data for Conga CLM (Conga AI): documented yes | SOC 2 report or certification for Conga CLM (Conga AI): documented yes | ISO 27001 certification for Conga CLM (Conga AI): documented yes | ISO 42001 AI-management certification for Conga CLM (Conga AI): not disclosed | Zero retention with model providers for Conga CLM (Conga AI): not disclosed | none | 0 | 2026-09-11 |
ContractbookContractbook ApS (Scrive) · HQ DK SMB and mid-market CLM with AI import and a contract assistant; SOC 2 Type II; eIDAS e-signature; DPA available; now part of Scrive. | Mid-sized firms, Small firms & solos, In-house legal | No training on customer data for Contractbook: documented yes | SOC 2 report or certification for Contractbook: documented yes | ISO 27001 certification for Contractbook: not disclosed | ISO 42001 AI-management certification for Contractbook: not disclosed | Zero retention with model providers for Contractbook: not disclosed | none | 0 | 2026-09-16 |
Docusign Intelligent Agreement Management (Docusign AI)Docusign, Inc. · HQ US Agreement platform combining Docusign CLM, eSignature and AI agreement workflows; public certification documentation states ISO 27001 and SOC 2 Type II. | In-house legal, Mid-sized firms, Small firms & solos | No training on customer data for Docusign Intelligent Agreement Management (Docusign AI): documented no | SOC 2 report or certification for Docusign Intelligent Agreement Management (Docusign AI): documented yes | ISO 27001 certification for Docusign Intelligent Agreement Management (Docusign AI): documented yes | ISO 42001 AI-management certification for Docusign Intelligent Agreement Management (Docusign AI): not disclosed | Zero retention with model providers for Docusign Intelligent Agreement Management (Docusign AI): not disclosed | none | 0 | 2026-09-21 |
Evisort (Workday Contract Intelligence)Workday, Inc. · HQ US Contract intelligence platform 'powered by Evisort AI', sold as Workday Contract Intelligence since the Sept 2024 acquisition; custom AI models for extraction and obligation tracking. | In-house legal | No training on customer data for Evisort (Workday Contract Intelligence): not disclosed | SOC 2 report or certification for Evisort (Workday Contract Intelligence): documented yes | ISO 27001 certification for Evisort (Workday Contract Intelligence): documented yes | ISO 42001 AI-management certification for Evisort (Workday Contract Intelligence): documented yes | Zero retention with model providers for Evisort (Workday Contract Intelligence): not disclosed | none | 0 | 2026-09-21 |
Icertis Contract IntelligenceIcertis, Inc. · HQ US Enterprise CLM with AI copilots; unusually broad compliance set including FedRAMP High, TISAX, ITAR and NIST 800-171; publishes an AI governance document via its trust centre. | In-house legal | No training on customer data for Icertis Contract Intelligence: documented no | SOC 2 report or certification for Icertis Contract Intelligence: documented yes | ISO 27001 certification for Icertis Contract Intelligence: documented yes | ISO 42001 AI-management certification for Icertis Contract Intelligence: not disclosed | Zero retention with model providers for Icertis Contract Intelligence: not disclosed | none | 0 | 2026-09-22 |
Ironclad (Ironclad AI / Jurist)Ironclad, Inc. · HQ US Enterprise CLM with Ironclad AI and the multi-LLM 'Jurist' assistant for review, drafting and research in native .docx; admins can opt in or out of AI training. | In-house legal | No training on customer data for Ironclad (Ironclad AI / Jurist): documented no | SOC 2 report or certification for Ironclad (Ironclad AI / Jurist): documented yes | ISO 27001 certification for Ironclad (Ironclad AI / Jurist): not disclosed | ISO 42001 AI-management certification for Ironclad (Ironclad AI / Jurist): not disclosed | Zero retention with model providers for Ironclad (Ironclad AI / Jurist): documented yes | none | 1 | 2026-09-22 |
JuroJuro Online Ltd · HQ GB Browser-native CLM with an AI Assistant, AI review and extraction; optional MCP connectors for ChatGPT and Claude; platform data hosted in the EEA; SOC 2 Type II attested. | In-house legal, Mid-sized firms | No training on customer data for Juro: documented yes | SOC 2 report or certification for Juro: documented yes | ISO 27001 certification for Juro: not disclosed | ISO 42001 AI-management certification for Juro: not disclosed | Zero retention with model providers for Juro: not disclosed | none | 0 | 2026-10-05 |
Leah (formerly ContractPodAi)ContractPodAi Ltd · HQ GB ContractPodAi rebranded as Leah: agentic legal AI, CLM and source-to-pay platform; names OpenAI and Anthropic as zero-retention LLM providers; AES-256 at rest, SOC 2 Type I & II. | In-house legal | No training on customer data for Leah (formerly ContractPodAi): documented yes | SOC 2 report or certification for Leah (formerly ContractPodAi): documented yes | ISO 27001 certification for Leah (formerly ContractPodAi): not disclosed | ISO 42001 AI-management certification for Leah (formerly ContractPodAi): not disclosed | Zero retention with model providers for Leah (formerly ContractPodAi): documented yes | none | 0 | 2026-10-07 |
LexionDocusign, Inc. · HQ US AI contract management platform acquired by Docusign in May 2024 (reported $165M); its technology now feeds Docusign Intelligent Agreement Management. Security page still live. | In-house legal | No training on customer data for Lexion: not disclosed | SOC 2 report or certification for Lexion: documented yes | ISO 27001 certification for Lexion: documented yes | ISO 42001 AI-management certification for Lexion: not disclosed | Zero retention with model providers for Lexion: not disclosed | none | 0 | 2026-10-07 |
LinkSquares (LinkAI)LinkSquares, Inc. · HQ US CLM with proprietary 'LinkAI' trained exclusively on legal documents and announced autonomous agents; multi-tenant and single-tenant AWS hosting in the US. | In-house legal | No training on customer data for LinkSquares (LinkAI): not disclosed | SOC 2 report or certification for LinkSquares (LinkAI): documented yes | ISO 27001 certification for LinkSquares (LinkAI): documented yes | ISO 42001 AI-management certification for LinkSquares (LinkAI): not disclosed | Zero retention with model providers for LinkSquares (LinkAI): not disclosed | vendor | 0 | 2026-09-03 |
Miramis (formerly Pocketlaw)Pocketlaw AB · HQ SE Pocketlaw rebranded as Miramis: AI-native contract platform to create, negotiate, sign and store contracts with the 'Miramis AI' agent; 1,000+ teams. | In-house legal, Small firms & solos | No training on customer data for Miramis (formerly Pocketlaw): documented yes | SOC 2 report or certification for Miramis (formerly Pocketlaw): documented yes | ISO 27001 certification for Miramis (formerly Pocketlaw): documented yes | ISO 42001 AI-management certification for Miramis (formerly Pocketlaw): not disclosed | Zero retention with model providers for Miramis (formerly Pocketlaw): not disclosed | none | 0 | 2026-09-03 |
OntraOntra, Inc. · HQ US Contract automation and intelligence for private markets (NDAs, side letters); zero-data-retention agreements with all third-party LLM providers; pursuing ISO 42001. | In-house legal | No training on customer data for Ontra: documented yes | SOC 2 report or certification for Ontra: documented yes | ISO 27001 certification for Ontra: documented yes | ISO 42001 AI-management certification for Ontra: documented yes | Zero retention with model providers for Ontra: documented yes | none | 0 | 2026-09-03 |
PreciselyPrecisely · HQ SE Governance-focused CLM with 'Precisely AI'; EU-hosted with custom in-country hosting available. Only facility-level ISO 27001 claims were found. | In-house legal, Mid-sized firms | No training on customer data for Precisely: documented yes | SOC 2 report or certification for Precisely: not disclosed | ISO 27001 certification for Precisely: not disclosed | ISO 42001 AI-management certification for Precisely: not disclosed | Zero retention with model providers for Precisely: not disclosed | none | 0 | 2026-09-03 |
Sirion (SirionAI)Sirion (SirionLabs) · HQ US AI-native enterprise CLM; trust centre lists ISO 27001:2022 and SOC 1/2 and publishes an AI policy aligned to the NIST AI RMF. Trust-centre pages blocked direct fetches. | In-house legal | No training on customer data for Sirion (SirionAI): not disclosed | SOC 2 report or certification for Sirion (SirionAI): documented yes | ISO 27001 certification for Sirion (SirionAI): documented yes | ISO 42001 AI-management certification for Sirion (SirionAI): not disclosed | Zero retention with model providers for Sirion (SirionAI): not disclosed | none | 0 | 2026-09-03 |
SpotDraft (VerifAI)SpotDraft · HQ IN CLM with VerifAI contract review in Word; publishes 'AI nutrition facts' naming OpenAI GPT-4; Google Cloud hosting with US, EU, India and Middle East regions. | In-house legal, Mid-sized firms | No training on customer data for SpotDraft (VerifAI): documented yes | SOC 2 report or certification for SpotDraft (VerifAI): documented yes | ISO 27001 certification for SpotDraft (VerifAI): documented yes | ISO 42001 AI-management certification for SpotDraft (VerifAI): not disclosed | Zero retention with model providers for SpotDraft (VerifAI): not disclosed | vendor | 0 | 2026-09-03 |
SummizeSummize Ltd. · HQ GB Contract intelligence that 'wraps around' Word, Teams and Slack with SIA agents; Azure-hosted and ISO 27001 certified; SOC 2 stated as a future intention. | In-house legal | No training on customer data for Summize: documented yes | SOC 2 report or certification for Summize: documented no | ISO 27001 certification for Summize: documented yes | ISO 42001 AI-management certification for Summize: not disclosed | Zero retention with model providers for Summize: not disclosed | none | 0 | 2026-09-03 |
Vendor, product, court and regulator names and logos are the property of their respective owners and are used solely to identify the product, body or document referred to; SafeLegalAI claims no rights in them. SafeLegalAI is not affiliated with, endorsed by, sponsored by or approved by any listed vendor, except where a record is labelled an affiliated product. Facts are recorded from vendors' published pages on the date shown; "not disclosed" means not found on the pages read, not that the vendor lacks it. No ranking, rating, review, recommendation or warranty is implied. Mark owners who prefer a text-only reference, and vendors seeking a correction, may write to the report page. Trade mark and quotation policy.