Agiloft vs Malbek: how they compare in 2026

AI Trainer, ConvoAI Document Q&A, the GenAI Prompt Lab, generative redlining and Screens are sold as AI Applications on top of Agiloft's contract lifecycle management platform. The platform's workflows, repository, approvals and integrations predate them. The Services Agreement defines AI Applications as functionality made available as part of the subscription and specified in the order. The Supplemental Terms govern them as a separate add on class. The models drive these features, and the CLM itself runs without them.

The models drive core capabilities on a platform that works without them. The contract lifecycle system underneath covers creation, workflow, approvals, the repository, milestones and clickwrap. The AI arrives as named modules. Malbek AI extracts terms, reviews third party paper against playbooks and runs the Bek assistant, AI Pro turns a customer's own templates into playbooks, and BusinessIQ reads across the whole portfolio. Modules are one of the four inputs a quote is built from, and the AI subprocessors apply only to customers who subscribe to AI services. The October 2026 Composable CLM release adds an MCP Server for outside agents and Drift Detective for customers with Bek and BusinessIQ. Remove the models and a working contract lifecycle system remains.

Agiloft's contract question answering ties each answer to the passage in the contract that supports it and lets the user jump to the highlighted text, which the vendor calls white box AI. Its platform page claims 100 percent auditable, deterministic accuracy without a method, test set or benchmark. Section 9.3(c) of the Services Agreement states that AI features exhibit varying degrees of accuracy, and the Supplemental Terms require the customer to check output independently. The tool reads the customer's own contracts rather than primary law, so questions of legal authority do not arise.

Grounding is described as an architecture. Bek's Ensemble LLM approach chains specialized agents that check one another's output, combining Malbek's own AI and machine learning models with foundation models reached through AWS Bedrock and Azure. Malbek states that this produces results that are well grounded and cited, and BusinessIQ answers through Bek with evidence drawn from the customer's contracts. The Malbek AI page claims unparalleled accuracy and reliability. No accuracy figure, test set or evaluation is published, and no failure mode is named, hallucination included. The source material is the customer's own repository, so grounding to primary law does not arise.

Agiloft's AI proposes and a person decides in most features. Redlining proposes insertions and deletions against approved clause language for a negotiator to accept, playbook review in Word flags deviations for the reviewer, and contract answers link to the source text so a user can verify them. Astra's Ask AI agents go further, creating contract records from intake and updating dates, status and attachments, and the homepage markets AI that reviews, negotiates and onboards contracts automatically. Section 2.3(c) of the Services Agreement makes the customer solely responsible for evaluating output, and Astra logs who edits or accesses contracts. No threshold at which an agent acts without a person, and no route for correcting or reversing a wrong AI output beyond the customer's own review, is published.

In most features Malbek's AI recommends and a person decides. Playbook review flags deviations from preferred terms and recommends revisions, guided review gives each reviewer recommendations in real time, and Bek rewrites clauses that a user takes into the draft in Word. The privacy policy states that a score, rank or classification is a recommendation for a person to act on, which a user can review, override or ignore. The March 2025 Conversational Contracts release says customers can set verification steps so that critical decisions require human approval, while agents gather request details, start workflows and run bulk amendments. Actions taken through the MCP Server are logged with a timeline, and AI Pro playbooks sit under administrator control. A featured customer says about 80 percent of its templates no longer need legal review. No threshold at which an agent acts without a person is published, and nothing describes how a wrong output is corrected or reversed beyond the user's own review.

Named customers now carry figures on Agiloft's customer pages. AdaptHealth cut managed care contract timelines from 180 to 37 days, RUSH cut off process vendor payments by 80 percent, Young's Holdings cut the time spent finding contracts by 98 percent, King County reduced contract management costs fourfold, Portland Community College more than halved turnaround, Accor grew from 200 to more than 600 users, and CDW moved from 5 percent to 90 percent reporting capability in a few months. Agiloft also cites 99 percent implementation satisfaction and 96 percent customer retention. None of the figures carries a measurement method, and no customer count is published.

Named customers and attributed quotes carry the evidence, without measurement. Customer logos include EDF, SurveyMonkey, Aptean, Articulate, Lighthouse, TIBCO, J.D. Power and Darden. Ellen Kranz, senior contracts specialist at Lighthouse, says about 80 percent of templates no longer need legal review and that contracts go active within minutes or hours. Adrienne Schaal, director of legal operations at Cloud Software Group, describes a Salesforce integration configured in minutes and field mapping without IT. Jeff Peduto, SVP of operations, describes renewal alerts 90 days ahead. The Salesforce page claims a 97 percent cut in legal touchpoints. A panel of headline figures, including 120 percent customer retention and 90 percent who would recommend Malbek, gives no basis, sample or date. Gartner named Malbek a Leader in its 2025 Magic Quadrant for contract life cycle management, and IDC named it a Major Player in its 2025 assessment of buy side contract applications.

Section 2.3 of the Services Agreement and section 1 of the Supplemental Terms provide that customer data is not used to train AI Applications or AI Models without the customer's explicit prior written consent, and section 4.3 extends that consent requirement to developing or improving the services at all. Astra's Clean Data Promise adds that contract data is never used to train AI models regardless of account tier. The platform is offered single tenant or multitenant by order, and section 2.2 confines Agiloft's use of customer data to providing and maintaining the services. Section 14.3 deletes customer data within thirty days of termination. The subprocessor list names OpenAI and AWS Bedrock as AI providers, while the Supplemental Terms still name Microsoft Azure OpenAI and disclose its temporary storage for abuse monitoring. The agreement does not address attorney client privilege or work product.

Malbek's commitments on training and confidentiality are substantive, short of privilege. The privacy policy says Malbek does not use customer data to train the AI models it uses, that data sent to an AI provider does not train that provider's models, that its provider agreements carry a clause against training, and that providers may not use prompts or outputs for their own purposes. It processes customer data only on the customer's documented instructions and does not use it for its own purposes. The trust center adds that inputs, outputs and embeddings are never shared and never accessible to the model vendor. Each tenant's data is logically separated, contract records can be restricted from viewing after signature, and retention and deletion are stated. The October 2026 release says Drift Detective benchmarks a draft against hundreds of thousands of customers' executed agreements, without saying whose agreements those are or how they are anonymized. These commitments sit in a policy and on the trust center, and the master subscription agreement is not public. The Terms of Use say no attorney client relationship or privilege is created with Malbek, and nothing addresses how privileged or work product material held in the repository is handled.

Section 9.3(b) of the Services Agreement states that Agiloft is not an attorney or law firm or a substitute for one. It adds that Agiloft does not provide advice, explanation, opinion or recommendation about legal rights, remedies, defenses, options, selection of forms or strategies. Section 9.3(c) and the Supplemental Terms state that AI output may be inaccurate and must be verified independently. The product is sold to legal and procurement teams. Agiloft's published terms do not describe how the product supports a supervising lawyer's duties, and name no jurisdiction limit beyond export control.

The Terms of Use draw the advice line. They state that Malbek is not a law firm or an attorney, may not perform services performed by an attorney and is not a substitute for one. Information on the service is not legal advice and is not guaranteed to be correct, complete or current, and no attorney client relationship or privilege is created. A user who believes Malbek has given legal advice about rights, remedies, defenses, forms or strategies is told not to proceed. The product is sold to legal, sales, procurement and finance teams inside companies, and the privacy policy treats scored or classified output as a recommendation for a person to act on. Nothing describes how the product supports a supervising lawyer's duties, and no jurisdiction limit is named beyond export controls. A featured customer says about 80 percent of its templates no longer need legal review.

The vendor markets white box AI that shows its reasoning by linking answers to source text. The Supplemental Terms bind customers to the Microsoft AI Code of Conduct, OpenAI usage policies and the AWS responsible AI policy, and section 3 warrants that insights from usage data are anonymized. Agiloft's terms and product pages set out no responsible AI framework of its own, no ISO 42001 or equivalent standard, no description of testing before release and no statement about uneven output. They name no accountable owner for AI governance. Agiloft also runs a trust portal at trustportal.agiloft.com.

Malbek's privacy policy, effective 3 September 2026, sets written rules for how its AI behaves. It names Malbek AI and BusinessIQ as the features that use AI, some of it on licensed third party models. It says the product tells users when they are dealing with an AI system, and marks generated or materially altered text as AI generated in machine readable form where that is feasible. Malbek makes no decisions with legal or similarly significant effects by automated means alone. A feature that scores, ranks or classifies a contract or a party produces a recommendation that a user can review, override or ignore, and Malbek commits to explain the system and offer human review if that changes. It also commits to advance notice before a new AI provider is added. The trust center's AI safeguards answer describes defenses against instruction override, data exfiltration through format manipulation, output hijacking, CSV injection, attack chains with several stages and delimiter confusion. Releases are certified by the QA team and opened through a management ticket. No one inside Malbek is named as accountable for AI outcomes, no testing of model output before release is described, and nothing is said about uneven output across contract types or counterparties.

Section 14.3 of the Services Agreement deletes customer data within thirty days of termination unless law requires longer, and section 4.2 allows export at any time. The subprocessor list, updated 15 July 2026, names AWS, AWS Bedrock and OpenAI with their locations, and section 16.2 says updates may be provided by email. The Supplemental Terms disclose Microsoft's temporary storage of AI content for abuse monitoring. Section 5.1 commits to organizational, physical and technical precautions against access by employees and subcontractors, and Astra encrypts data, applies role based permissions and logs who edits or accesses contracts. Section 5.3 gives the customer a route for reporting incidents, and an incident notification commitment sits in the DPA.

Retention, deletion, access, subprocessors and incident practice are each set out in Malbek's own documents. The privacy policy, effective 3 September 2026, keeps customer data for the term of the subscription and deletes or returns it at termination under the data processing addendum. Backups persist until their cycle is overwritten. Audit records cannot be altered and are kept for the life of the customer instance, so a deletion request removes the contract record and keeps only the log entry showing the deletion. The trust center adds that customers set retention periods for contracts, attachments and related data, that data is irreversibly deleted when a period ends, and that retention and deletion activity is logged. Access runs through role based permissions, single sign on, phishing resistant multifactor authentication and SCIM provisioning, and audit logs capture role, configuration and file changes. The subprocessor list names sixteen providers with function and location. If an incident affects customer data, Malbek notifies the customer without undue delay and within the period in the addendum, and supplies what the customer needs to meet the 72 hour deadline that applies under the GDPR. The addendum itself is released through the trust center on request.

Section 10.1 of the Services Agreement, version 1.2 of 22 July 2026, gives an indemnity for intellectual property infringement. A second indemnity covers unauthorized disclosure or misuse of customer data resulting from a breach of the data use or security obligations. Section 10.2 sets out exclusions, and the mitigation remedies include a pro rata refund. Section 11 caps each party at twelve months' fees and raises the cap to three times that for breaches of the security, confidentiality and compliance sections. Gross negligence, willful misconduct, fraud and the indemnities sit outside any cap. Section 9.2 warrants material conformity, with a remedy of repair or refund. The Supplemental Terms state that AI output is provided as is and that Agiloft has no liability for any damages arising from use of output. Neither document mentions insurance.

Malbek's Terms of Use, updated 9 March 2025, cover the website, its applications and plug ins, and the services provided through it. For a paying customer on a master subscription agreement, they apply only where that agreement says nothing different, and the master subscription agreement is not public. The Terms provide the service as is and with all faults. They disclaim every warranty, including accuracy, completeness and fitness for a particular purpose, and say Malbek does not warrant that the service is free of errors. Malbek's total liability is capped at the greater of $100 or the fees paid in the twelve months before the claim. The cap does not apply to death, property damage or personal injury caused by Malbek's gross negligence, or to injury caused by its fraud. The indemnity runs one way, from the customer to Malbek. The Terms give no indemnity for intellectual property or data claims, no remedy for a service that does not perform, and mention no insurance.

The Integration Hub is an embedded integration platform powered by Workato, which Agiloft says offers more than 1,000 prebuilt connectors. Agiloft for Salesforce launched on Salesforce AgentExchange in August 2026 as a no code managed package that passed Salesforce's security review, and Astra works inside Microsoft Word. Public help documentation sits on the Agiloft wiki, and the Services Agreement addresses third party services. The pages describing the hub cover its depth in general terms and do not say what a firm must configure or which systems sync in which direction.

Malbek documents integrations into the systems contracting runs through, and what they move. More than 50 are listed in a directory that filters by type, connection and direction, across CRM, ERP, electronic signature, storage, identity, collaboration and business intelligence. The Salesforce connector is native and syncs in both directions in real time. It covers accounts, opportunities, quotes, contacts, leads, products and custom objects, starts contract workflows from deal events, fills templates from opportunity data, and returns approval, signature, redlining and execution status to the opportunity record. One Malbek instance can connect several Salesforce orgs. Customers map fields through a drag and drop interface without code or IT. Named targets also include NetSuite, SAP and SAP Ariba, Coupa, Workday, Microsoft Dynamics, ServiceNow, Slack, Microsoft Word, SharePoint, DocuSign and Adobe Sign. A REST API covers systems without a connector, and the MCP Server opens the contract layer to outside AI assistants. The plans page says some integrations are included and others cost extra.

The Services Agreement defines the core platform as available on a single tenant basis, meaning a dedicated cloud environment for one customer, or on a multitenant basis, chosen in the order. The subprocessor list names AWS as the core host in Australia, Canada, Ireland, Germany and the United States, AWS hosting for Astra in Germany and the United States, AWS Bedrock in Germany and the United States, and OpenAI in the EU and the United States. The privacy notice says data is processed in the United States and, for certain customers, in the EU, Australia, the United Kingdom or Canada. An EU Data Act addendum gives 30 days to retrieve data and deletion within 30 days after that. What changes between tiers, and which AI provider serves a given customer's region, is not stated.

The tenancy model and the hosting country are both stated. The trust center describes a multitenant architecture in which each customer's contracts and data are logically separated, with security policies, patching and monitoring applied the same way across all tenants. Backups are encrypted with geographic redundancy, and the platform runs across several AWS availability zones. The privacy policy says production infrastructure is hosted in the United States and that personal data from other countries is transferred there, with standard contractual clauses for Europe, the United Kingdom and Switzerland. Some service providers operate in Ireland and Sweden. The AI services on the subprocessor list, AWS, Google Document AI and Microsoft Azure AI, are all listed in the United States. No choice of region and no dedicated single tenant option is described.

Agiloft's security page lists SOC 1, SOC 2, ISO 27001 and ISO 27701, and the DPA cites annual SOC 1, SOC 2, ISO 27001 and Cyber Essentials Plus audits. Section 5.2 of the Services Agreement says independent auditors have reviewed the design and effectiveness of its security controls, and reports are available through the trust portal at trustportal.agiloft.com with a signed NDA. No auditor, coverage period or scope is published outside the reports.

Malbek holds SOC 1 Type II and SOC 2 Type II attestations in its own name. Its trust center carries 2026 Type II reports for both, and the SOC 2 scope covers security, availability and confidentiality. The reports, a penetration testing summary, architecture and data flow diagrams and the data processing addendum are released through the trust center on request, under a confidentiality agreement where the document requires one. The ISO 9001, ISO 27001, ISO 27017, ISO 27018, PCI DSS Level 1 and SOC 1, 2 and 3 certifications listed beside them belong to AWS for the hosting, not to Malbek. Malbek also describes annual independent security audits, regular penetration testing, a security operations center, intrusion detection and quarterly security awareness training. No auditor or coverage period is published outside the reports.

Agiloft's subprocessor list, updated 15 July 2026, names OpenAI, in the EU and the United States, and AWS Bedrock, in Germany and the United States, as AI service providers for AI assisted features. The Supplemental Terms, version 1.0 of April 2025, still say certain AI Applications may be powered by Microsoft Azure OpenAI Service and disclose Microsoft's temporary storage of input and output for abuse monitoring, so the two documents disagree. The incorporated acceptable use policies are Microsoft's, OpenAI's and AWS's. Section 16.2 of the Services Agreement, version 1.2, says updates to the list may be provided by email, without a notice period or objection right. No model is named and providers are not mapped to features.

Malbek names its AI providers but not its models. Malbek describes Bek's Ensemble LLM approach as combining its own AI and machine learning models with foundation models reached through AWS Bedrock and Azure. The subprocessor list names Amazon Web Services for hosting and AI services, and Google Document AI and Microsoft Azure AI for AI services, all in the United States, and marks the last two as applying only to customers on AI powered services. The privacy policy names the same three, commits to advance notice before a new AI provider is added under the data processing addendum, and says Malbek's agreements with AI providers carry a clause against training. Azure OpenAI also appears among the integration logos on the plans page. No individual model is named, the models offered through Bedrock are not identified, and no feature is mapped to a provider.

Astra has a free plan with unlimited users, 1,000 credits a month and unlimited use of the Word add in. Pro starts at $120 a month with annual billing, with tiers of 2,500, 5,000, 10,000, 20,000 or 40,000 credits whose individual prices are not shown. Advanced has custom pricing, single sign on and dedicated support. The broader CLM subscription is quoted through an order specifying user types, quantities and additional services, and enterprise implementation is handled by Agiloft or a partner. The Astra entry rate is separate from the price of CLM deployment, its integration package and enterprise configurations.

Malbek publishes the structure of its price without a figure. The plans page builds every quote from four inputs: user types, number of users, modules and Malbek connections, and says customers pay only for what they need. Some integrations are included and some cost extra. Implementation is scoped from a few data points and delivered in phases, until the customer can run and expand the platform on its own. Support comes by phone, email and the help center, with access to support and success teams after go live, and monthly training carries no extra cost. No number, band, plan name or feature split between packages is published, so the shape of the price is visible and its size is not.

Solution pages address legal and procurement functions and nine industries: financial services, healthcare, manufacturing, business services, pharma and biotech, software and technology, energy, government and education. The product is sold to enterprises, with 2026 Pacesetter award winners including Dell Technologies, UBS, U.S. Bank, Shell and Equinix. The platform is offered single tenant or multitenant, with an EU Data Act addendum. The Services Agreement bars use for high risk activities, and Agiloft names no contract type or practice area as unsupported and describes no law firm use.

Malbek sells to corporate enterprises rather than law firms. Separate solution pages cover sales, legal, procurement and finance, each with its own purpose. Four industries also have their own pages: life sciences, manufacturing, consumer packaged goods and retail, and the life sciences page covers clinical, commercial and regulated agreements. Malbek states compliance with GDPR and CCPA. BusinessIQ's early adopters are Fortune Global 500 companies in healthcare and life sciences, technology and manufacturing, none of them named. Law firms are neither claimed nor excluded. No organization size is stated, government use is not addressed, and no contract type is named as unsupported.