Contractbook vs Pactly: how they compare in 2026
Getting signed agreements into a usable repository is a shared task, but these platforms approach the surrounding work differently. Contractbook combines AI Import with browser collaboration, signing and HubSpot synchronization. Pactly adds detailed Word playbooks and Projects tables whose cells show reasoning, source excerpts and human corrections. In repository analysis, AI Legal Index identifies Pactly's protection of verified values during reruns as a specific control for maintaining a reviewed dataset. Contractbook fits teams organizing a contract flow around customer records; Pactly offers a more explicit table for applying the same questions repeatedly across a portfolio. Both require attention to access and data use. Pactly project membership grants access to the project's files even when normal repository permission would not, so the people invited to an analysis project matter.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
AI Import reads existing contracts, extracts structured fields and helps turn a collection of files into a usable agreement database. The Contract Assistant adds plain language questions, summaries, risk identification and clause revisions. Both operate inside a wider application with template drafting, collaboration, electronic signatures and ongoing contract management. Templates and configured workflows still handle repeat agreements independently of the assistant. Customers can combine the extracted dates and obligations with reminders, while CRM data populates new agreements. Essential includes the assistant; higher plans add broader data extraction, custom fields, automation and team administration around these AI functions.
Models identify clauses and concepts for playbook review, generate proposed revisions and extract values across contract collections. Assist adds questions about a contract's text and history, with proposed edits and comments in Word. Projects applies the same questions to many agreements and returns a structured table with reasoning and source passages. These are core analysis functions alongside the conventional platform: questionnaires generate approved templates, workflows route approvals, signatures execute agreements and reminders track renewals. Those administrative features do not depend on generative output. Projects is available separately, while Growth and Ultimate include it within an unspecified fair use allowance.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
AI Import connects extracted data to the text it came from. Selecting a purple field in the sidebar moves the reader to its exact location in the original agreement and highlights the passage. Users can inspect individual values or verify all fields together, and the repository marks completed verification. Import first processes the uploaded files and extracts their contract data, with OCR included for relevant files. This is source based verification of customer agreements, rather than a legal citator. No test set, measured accuracy result or explicit unsupported answer behavior accompanies the Contract Assistant's broader clause recommendations.
Projects connects an extracted value to reasoning, a quoted source passage and a document view that highlights the relevant text. Users can correct a value, preserve the original AI extraction and mark a result as verified. The guidance names concrete failure modes, including confusion between effective and commencement dates, loss of qualifiers in compound liability caps and missing values in drafts with placeholders. Word review also exposes the clauses behind each playbook assessment. No reproducible benchmark or measured error rate accompanies these mechanisms. The terms expressly warn that AI answers can be incomplete or wrong and require checking against the source.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
An AI import can be canceled during upload, OCR or extraction, and the canceled file is discarded. After processing, a reviewer checks the proposed data against highlighted source text and marks the fields verified. That verification can become the trigger for a reminder or a move into a shared space. Users need the relevant company permissions to import files and manage custom contract types. Template workflows also support approval steps before signing. These controls give teams review and cancellation surfaces, but the assistant has no stated confidence cutoff or defined escalation path for an answer that cannot be supported.
Assist never applies a contract edit or comment silently: proposed changes require acceptance and enter Word as tracked changes. A reviewer can reject, revise or copy the proposal, and a support message is not sent without the user's choice. Playbook results can be Uncertain, returning the decision to a human; accepted deviations carry a written justification. Projects preserves corrected and verified values during reruns and identifies outdated results when a column question changes. The external MCP connection is read only and cannot create, modify, delete or send signature requests. Standalone Word generation remains described as an upcoming release rather than an existing unrestricted action.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Bizzkit's compliance officer describes saving 15 to 20 hours extracting data from about 50 legacy data processing agreements. That is a named example of AI extraction in use, with the time estimate supplied by the customer. Lenus separately describes reducing contract preparation from 15 minutes to five through templates and integrations with Salesforce, Greenhouse and HiBob. Those automation results are not presented as a measurement of the newer Contract Assistant. GANNI and Pave also discuss repository and extraction benefits. No dated comparative study isolates the assistant's effects on review quality or legal outcomes.
A September 2022 case study identifies Virtuos and its Senior Legal Counsel, Johnathan Yong, and describes an NDA process before and after adopting Pactly. Requests previously took several days or sometimes a week across Word, shared drives and email. Following template questionnaires, legal review and DocuSign execution, reported median finalization fell to two hours and median completion of a signed agreement to twelve hours. Yong describes feedback more than two months after implementation. The account explains the workflow change and measured contract type, although it does not provide the sample size. It measures contract automation rather than the accuracy of today's generative review features.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Section 9.12 of the service terms bars AI model training on retained platform data unless the customer gives consent in writing or through the application. Confidential information is limited to service delivery and remains protected after termination. AI imports start in the user's private contract view, while sharing depends on the application's space permissions. Google Cloud hosts platform data and Azure hosts the language model, both with EU locations in the processor list. Privilege and work product handling are not addressed directly, and the terms do not specify what the model provider retains from individual prompts or responses.
The service agreement protects nonpublic customer data as confidential information and preserves customer ownership. Its improvement license nevertheless permits analysis of service information involving customer data during the term and use of anonymized aggregate customer data for lawful business purposes afterward. Public marketing says contracts never train AI models, without the same express restriction in the agreement. Sensitive groups can hide contracts from nonmember administrators, but deliberate sharing and project membership can widen access. The provider list explains where contract data travels. No specific attorney client privilege, work product or accidental disclosure protection is stated for lawyers using these features.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
The service is restricted to business activity and is not offered to consumers. Section 8 describes the supplied templates as drafting inspiration rather than legal advice, and the company profile makes the same tooling distinction for the product. Legal teams can control templates, approvals and shared spaces while other employees generate routine agreements. The customer remains responsible for using suitable agreements and deciding whether electronic signatures are appropriate. No jurisdiction specific competence guidance or named professional supervision standard accompanies the assistant. Its explanation and rewriting features therefore sit inside the customer's own legal review and contracting responsibilities.
Pactly's agreement says the company is not a law firm, use creates no attorney client relationship and the service does not solicit legal advice. It separately warns that AI answers may be wrong and makes the customer responsible for comparison with the source. Product guidance describes the reviewer accepting edits and resolving uncertain playbook findings, and the company explicitly rejects a fully automatic robot lawyer role. Corporate legal departments are its principal audience, with business users working through forms and approvals. The material does not map the controls to named bar guidance or publish jurisdiction specific professional responsibility limits.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Contractbook's trust center describes security policies, change management and an incident response program. Management reviews that security program at least annually, and production data is restricted in development and testing environments. The AI features separately support source highlights, user verification and consent for model training. None of these materials sets out an AI release evaluation process, a responsible AI framework or results showing uneven performance across contract types or user groups. The page titled AI Policy Page is a company and product profile for automated readers, rather than a policy assigning accountability for the behavior of the language model.
Published AI guidance explains how customers verify results, handle uncertain findings and correct extraction mistakes. Release notes describe feature changes, and security materials identify a data protection officer and engineering responsibilities for incidents. These do not establish an AI governance program with an accountable model owner, release testing criteria or results on uneven behavior across languages, populations or contract categories. Positive and negative playbook examples help customers configure review, rather than disclose Pactly's own evaluation program. No formal bias assessment, model card or governance framework accompanies the descriptions of Assist, Projects and playbook review.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Customers can remove or archive their own data through the application and request removal at termination. Signature verification information has separate retention rules and generally requires all signers' consent before deletion. The privacy policy gives a general service data retention period with legal exceptions, while the processor list identifies providers, roles and locations. Space permissions, encrypted storage, logging and a trust center incident plan add operational controls. Confidentiality breaches require prompt notice under the terms. A specific retention window for assistant prompts and outputs, together with a deletion schedule at the model host, is not stated.
Pactly describes encrypted storage and transport, monitoring, backups, vulnerability testing and separate production and test environments. Administrators can require two factor authentication, and high criticality incidents trigger notice to affected customers or all customers when the affected group cannot be identified. A public supplier register details processing functions and regions with advance change notice. The terms provide sixty days to retrieve data after termination, followed by requested deletion with an anonymized aggregate exception. Assist attachments expire after seven days, but ordinary chat history, backup deletion and underlying AI provider retention lack a complete fixed schedule. No definite breach notification deadline is stated.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
The service agreement limits liability to fees paid in the 12 months before the first claim arose. It excludes lost profit, business opportunity, third party liabilities, data loss and several other categories of loss, and supplies the service as is. Death or personal injury caused by negligence, fraud and fraudulent misrepresentation are outside the stated limitations. The customer, rather than the vendor, gives the agreement's indemnity. Contractbook promises customary insurance without naming its amount or scope. These provisions do not provide a specific warranty or recovery route for a mistaken AI clause explanation, extraction or revision.
The service agreement includes an indemnity for third party claims involving patents, copyright or trade secrets infringed by the service, subject to stated exclusions and control of the defense. Available remedies include replacement, modification, a license or termination with unused fees returned. General liability is capped at fees paid in the preceding twelve months and excludes data inaccuracies and several categories of loss. AI answers are expressly described as potentially incomplete or wrong, with verification assigned to the customer. There is no separate output accuracy warranty or AI insurance promise. Availability remedies have separate claim deadlines and exclude beta features.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
The HubSpot integration moves deal and company data into contract templates and can synchronize negotiated values back after signing. Setup requires defined template fields, the appropriate Contractbook template or company permissions, and specified HubSpot CRM, product library and marketplace rights. The administrator connects the accounts through Integrations and accepts the requested permissions, then configures triggers and actions. HubSpot quotes can become attachments, and its widget displays contract status and activity. Disconnecting unpublishes related automations without deleting generated files. Salesforce, API access, Zapier and Make extend other workflows, with availability and charges varying by plan.
The Word plugin uploads an agreement for playbook review, displays matched clauses and proposed fixes, inserts approved language as tracked changes and records review decisions between rounds. The MCP connection exposes eight read only tools for contract text, metadata, parties, playbooks, clauses and account information to external clients such as Claude and Cursor. Public instructions specify API key or OAuth authentication, administrator consent, filters, returned fields and request limits. Separate APIs can generate contracts from templates and support webhooks. DocuSign and Adobe Sign support execution, while the Ultimate plan's SharePoint connection is described as backup only rather than general document synchronization.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Contractbook runs as an online contract workspace with organization accounts, shared spaces and individual access rights. The subprocessor list places Google Cloud platform hosting and Azure language model hosting in the EU. It also identifies United States services for email, messaging, monitoring, traffic management and integrations, so the EU hosting entries do not describe every supporting data flow. The privacy policy permits transfers outside the EU and EEA with safeguards. No country selection, customer hosted installation or private tenancy option is specified, and the available material does not allocate storage and processing locations separately for each subscription plan.
Core hosting, compute and Bedrock inference use AWS in Singapore by default, with Malaysia for specified Malaysian customers. Structured data in MongoDB Atlas remains in Singapore for all customers. The supplier table separately identifies United States processing for document conversion, OCR, Cerebras inference and fallback Anthropic or OpenAI services, plus Langfuse monitoring in Germany and Cloudflare's global edge. Those routes make regional hosting different from exclusive regional processing. The SLA also recognizes fully managed private deployments, without a standard public price for them. Singapore and Malaysia have separate service entry points, and the published provider map identifies functions as well as locations.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
The security page states SOC 2 compliance and describes recurring penetration tests, encrypted credentials, verified accounts and two factor signing. A Secureframe trust center offers a SOC 2 report through a request control and lists security policies covering access, change management, risk and incident response. Its public material does not identify the assessment period, report type, auditor or detailed system scope. The separate Openli profile could not be accessed, so any material there remains unknown. Customer signatures and identity controls support contract execution, while the SOC 2 claim addresses service controls rather than measured accuracy of the AI assistant.
Pactly identifies ISO 27001 certification in its product, pricing and trust materials and offers its certificate, security whitepaper and penetration test results on request. The public trust FAQ describes Amazon's certified data centers when explaining ISO coverage, so infrastructure attestations need to be distinguished from Pactly's own claim. No openly supplied certificate names its current auditor, validity period and exact company scope. SOC, PCI and FISMA references in the infrastructure section concern AWS rather than a separate Pactly audit. Security practices include vulnerability scans, access logging, staff training and incident response, without resolving that certification scope question.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
Microsoft Azure hosts the large language model used for the product's AI functions, with the processor list assigning that service an EU location. Google Cloud is separately responsible for storage and platform hosting. The application combines document import, OCR, field extraction and a conversational contract assistant, but the specific model name and version are not identified. The terms require customer consent before retained platform data is used for model training. A general notice rule for contractual updates does not provide a specific commitment to notify customers about model replacements or changes to the inference supply chain.
Pactly names AWS Bedrock for core inference, Cerebras for tasks requiring low latency, and Anthropic and OpenAI as fallback providers when Bedrock is unavailable. The supplier register identifies processing locations and also lists Langfuse for AI monitoring. Customers can subscribe to at least thirty days' written notice before a new subprocessor is engaged and raise an objection during that period. Exact production model families and versions are not supplied for each feature, nor is there a promise to notify every model version change within an existing provider. External MCP clients bring their own model relationship in addition to Pactly's built in AI.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Essential, Centralize and Accelerate include one, five and ten users, with annual signed contract allowances of 100, 350 and 500. Template limits are five, 15 and 25. The current pricing page shows no base subscription amount; a company profile updated in March 2026 gives a starting rate of €89 per month. The pricing FAQ lists five extra users at €50 per month, or €600 annually. Automation and provisioning are optional for Centralize and included in Accelerate, while several integrations cost extra. Custom setup uses a quote, and the terms provide for upgrades or additional charges when usage limits are exceeded.
Standalone Projects starts at $69 a month for one user, fifty documents and 250 monthly runs, or $690 annually with 3,000 runs available immediately. Larger packages, additional documents and extra runs have published charges. The wider CLM starts at $99 per user monthly on an annual plan; Growth is $139 with five users minimum and Ultimate $179 with ten. Their monthly AI review allowances are ten, fifty and one hundred respectively. Growth and Ultimate include Projects under fair use without a numerical allowance. Enterprise, migration and some implementation services require a quote. Projects has a fourteen day trial, while the CLM trial lasts thirty days.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Small and midsize sales, legal, HR and operations teams use the platform for standard recurring agreements such as NDAs, sales contracts and employment agreements. The Lenus case describes legal counsel setting templates and boundaries for colleagues across several markets. Bizzkit uses extraction for legacy data processing agreements, while GANNI and Pave describe contract visibility and renewal work. The company focuses on European markets and also offers industry pages for government, healthcare, construction and procurement. Its own profile excludes legal advice and simple one off signing as its intended role, without supplying a jurisdiction by jurisdiction support matrix.
Pactly primarily serves corporate legal departments, including solo counsel and small teams across Southeast Asia and other Asia Pacific markets. Larger organizations can configure approval routes, business intake and administrator controls. Supported examples include NDAs, services, procurement, leases, employment and software licenses; Projects extends analysis to loan agreements, insurance and related portfolios. Sales, HR, finance and procurement can participate without turning the product into a consumer legal advice service. The company explicitly describes most customers as internal legal departments rather than firms. No measured language coverage or comprehensive jurisdiction matrix defines where AI interpretation is most reliable.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
Section 9.12 prohibits use of retained platform data for AI model training unless the customer consents in writing or through the platform. Section 9.1 separately refers to anonymized development data where consent has been given. The general service processing license covers delivery, maintenance, fixes, security and legal obligations. It does not override the express training consent requirement, and no default training permission is stated for a new customer.
The agreement permits analysis of service information involving customer data during the subscription for improvement and development. It also allows anonymized customer data to enter aggregate datasets used for lawful business purposes during and after the term, with safeguards against reidentification. Marketing separately promises that contracts never train AI models. The published agreement does not repeat that prohibition or exclude model improvement from its permission.
This records the contractual scope, not a claim that Pactly actually feeds every raw agreement into a shared training process.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
Customers may remove or archive their data at any time through the platform under section 9.4, and may request removal of their own data when the agreement ends. Signature verification information follows a separate rule requiring signer consent. The privacy policy supplies a broader service data retention period with legal exceptions. No explicit zero retention setting or separate fixed period for assistant prompts and answers is specified.
Contract data remains retrievable for sixty days after termination. The standard terms then provide deletion on written request, excluding anonymized data already combined into aggregate datasets; online plans may delete after the same access window. Assist attachments expire after seven days, but a complete schedule for normal chat history, backups and provider copies is absent. The upcoming standalone Word generation description gives a thirty day file expiry, which should not be treated as the lifetime of all current AI outputs or contracts saved to the repository.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
AI imports are private in the importing user's contract view until shared directly or moved to a shared space. Space access separates viewing, contract management and space management, while external collaborators receive view rights only. Company user groups can also receive access, with direct permissions surviving removal from a group. This is Contractbook's own access model, without an identified connection that inherits a firm's document system ethical walls.
Pactly uses its own groups and roles rather than inheriting a document management system's matter walls. Sensitive groups hide contracts even from nonmember administrators, but an authorized person can deliberately share a contract outside the group. Projects creates another boundary: every project member sees all present and future project documents, even when the normal repository link is unavailable. Administrators can see all projects.
This is a described access model with important widening rules, not a promise that an original contract restriction automatically follows every AI analysis surface.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
Section 9.8 requires written notice before legally compelled disclosure whenever possible. The confidentiality clauses also permit information to be supplied to other signers of an agreement completed through the platform. The privacy policy covers legal obligations and requests from authorities. No transparency report accompanies these commitments. The separate Disclosure Policy concerns security vulnerability reporting and does not describe the handling of subpoenas or other demands for customer contracts.
The service agreement incorporates Pactly's law enforcement request policy for compelled disclosure of customer data. That policy requires evaluation of governmental requests and notification to the customer where legally permitted, allowing an opportunity to seek protective measures. It applies to hosted and fully managed deployments, while excluding self hosted or customer managed solutions. Foreign authorities are directed through applicable legal and diplomatic channels.
No report of request volumes or outcomes accompanies this commitment, and the general privacy notice's legal disclosure permissions do not replace the more specific customer data policy.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
AI Import processes the customer's legacy agreements and points extracted fields back to text in those files. The contract assistant also works with the selected agreement, while customers can create templates or use the vendor's template library. No licensed case law or statute collection is identified for those functions. The supplied templates are drafting material, and the agreement expressly distinguishes them from legal advice for the customer's situation.
The analysis context is the customer's agreements, playbooks, approved clauses and related files. Projects reads each row's main contract and supporting amendments or schedules; Word review uses configured positions and fallback language. These are customer supplied materials rather than a catalog of primary law or licensed legal commentary. Pactly does not name an external research corpus, describe the source rights behind general model knowledge or supply an update process for legislation and case law. The public subprocessor list identifies processing suppliers, not a legal content licensing arrangement.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
The platform's verification feature checks extracted information against the source contract, with highlighted passages and a completed verification marker. It does not track judicial treatment of cases or statutory amendments. The assistant can explain and rewrite clauses, but no connection to a legal citator or warning that an authority has been overturned is specified. Renewal reminders and signature status concern the agreement's lifecycle, rather than the legal status of an authority.
A source passage in Projects establishes where a contract value came from, and playbook review identifies the agreement language relevant to a configured rule. Neither function determines whether a case remains good law or legislation has changed. No licensed citator, subsequent history service or independent treatment signal is described. The legal team maintains its own clause positions and decides whether they remain appropriate.
Contract source highlighting and a verified cell marker therefore support review of supplied material without establishing the continuing validity of an external legal proposition.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Reviewers can inspect AI extracted fields beside highlighted source passages and verify them individually or together. They can also cancel an import during processing, which discards the file. These controls let a person check the extraction, but no explicit unsupported answer response or confidence indicator is described for the conversational assistant. The option to stop an upload is a user action, not a model refusal when information is insufficient.
Playbook review includes an Uncertain result when a clause cannot be conclusively assessed, directing a person to decide. Each position also defines what happens when no relevant clause is found: compliant, not compliant or uncertain, according to the customer's chosen rule. Projects treats placeholders such as an unfilled name as not found and explains common interpretation failures. These are described negative and uncertainty states rather than a general guarantee of refusal. A wrong configuration of the absent clause rule can still produce a misleading result.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court order or disciplinary record concerning fabricated legal citations from Contractbook appears in the AI Hallucination Cases database. The product extracts data from customer agreements and offers questions, summaries and clause revisions within its contract workspace. That database result does not measure extraction or drafting accuracy. Its source highlights support a user's review of contract data, without constituting a check of every legal assertion produced by the assistant.
Damien Charlotin's AI Hallucination Cases database contained no entry naming Pactly on October 16, 2026. The database concerns reported court decisions involving fabricated AI material and does not capture every private error in contract analysis. Pactly principally supports corporate agreements rather than preparation of court authorities, which limits what that incident record can say about its usual work. Its terms independently warn that AI answers may be incomplete or incorrect. No named court incident is therefore a limited reporting observation, not a validation of model accuracy.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
The service terms limit the platform to business users and explain that the template library does not provide legal advice. Legal departments can control templates, permissions and review steps for other employees. No named bar opinion, jurisdiction specific competence requirement or product mapping to professional ethics guidance accompanies these controls. The statement that the service is a business tool does not specify how a lawyer should record supervision of its AI functions.
Pactly explains that it is not a law firm and requires people to verify AI answers against source text. Its review guidance describes accepting tracked edits, recording deviations and resolving uncertain results. These are practical controls for legal work, but the materials do not map them to a named professional ethics opinion, bar rule or regulator's jurisdiction specific AI guidance. References to Singapore privacy law and a data protection officer address data regulation rather than a lawyer's professional obligations when serving a client.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
The stated buyers are business teams managing their own sales, employment, supplier and compliance agreements. Named legal customers include internal counsel at Lenus, GANNI and Pave, and the product describes savings in their contract administration. Bizzkit reports less manual extraction work on legacy agreements. No law firm client billing workflow is identified in the current buyer materials, and those savings relate to the organization's own time and contracting costs.
The principal buyer is a company's own legal department, with sales, procurement and HR using forms and approvals around that team's contracts. The Virtuos case measures internal NDA turnaround, and the product's savings claims concern corporate workloads and staffing capacity. Those examples do not involve a lawyer billing an external client for AI assisted work. Published subscription and run charges describe Pactly's software fees, without a client invoice method, pass through rule or accounting of billable legal time. Law firm fee treatment is not part of the described workflow.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
The processor register names Google Cloud for platform hosting and Azure for the language model, both in the EU, alongside supporting providers and their locations. Customer terms set a training consent requirement and confidentiality duties. The data processing agreement is generated through a workflow that requests customer details and acceptance of terms. No separate client consent pack or exact model version inventory accompanies the public processor register.
A public provider register identifies data categories, functions and regions, including core Bedrock inference, fallback Anthropic and OpenAI services, and AI monitoring. Customers can subscribe to change notices and object before a new supplier is engaged. The trust page offers security reports and a certificate on request, while service terms and the law enforcement policy provide additional diligence material. No dedicated client consent pack or outside counsel AI disclosure form is supplied. Counsel would still need to distinguish the contractual improvement permissions from the marketing training promise.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Imported agreements retain extracted fields, highlighted source passages and a verification state that users can inspect in the contract view. The application also tracks versions, collaboration and signature activity. These elements provide part of the record of a user's review, without a specified export connecting each AI response to its model version and a named human verifier. No court specific certification form or complete AI disclosure bundle is described.
Projects can export values, reasoning and source references to Excel, and produce a PDF preserving the table's visual labels. Human corrections and verifications record who acted and when inside the application, but the help guide expressly says the Excel export omits that sign off marker. Word review retains tracked edits and written justifications for deviations, while account activity is available through logs. These records preserve parts of the process without a combined export of model version, exact prompts, source context and human approval for a court filing.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- AI Governance and Bias Disclosure
- Good Law Verification
- Bar Guidance Alignment
Which one fits
Choose Contractbook if
- HubSpot should exchange information with the contract workflow.
- Browser collaboration and signing are the primary working surfaces.
- Imported agreements need linked extracted terms that people can verify.
Choose Pactly if
- Your review method depends on published Word playbooks.
- Portfolio analysis needs reasoning and an excerpt for each result.
- Human corrections should remain intact when questions are rerun.
In summary
Contractbook
Contractbook turns imported agreements into structured contract data and connects its contracting workflow with HubSpot. Browser editing, collaboration and signing sit alongside the repository rather than requiring a separate Word review process.
Pactly
Pactly's Word review follows approved positions, while Projects applies structured questions across uploaded agreements. Users can verify or correct extracted values and retain those decisions when the analysis runs again.
Questions buyers ask
How does each product connect an extracted answer to its source?
Contractbook AI Import highlights supporting text for review. Pactly Projects supplies reasoning, a source quotation and page access for a result, allowing a reviewer to inspect the underlying agreement. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Does a Pactly project preserve ordinary repository access limits?
No. Adding someone to a project gives that person access to its current and future files, including previews, even if the ordinary repository would deny access. Project sharing therefore creates its own access boundary. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Which workflow better suits a HubSpot centered sales team?
For teams connecting customer records with contracts, AI Legal Index highlights Contractbook's two way HubSpot workflow. Pactly has API and automation options, but its named CRM connections do not establish the same field synchronization in this comparison.
Will Pactly's spreadsheet export prove that every answer was approved?
No. The export contains extracted values, reasoning and source material, but omits the verification signoff. The reviewed state remains inside Projects rather than becoming a complete approval record in Excel. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Contractbook import verification and Pactly Projects verification address extracted data, not the legal correctness of an agreement.