ContractHero vs Inhubber: how they compare in 2026
ContractHero and Inhubber are both Berlin contract management products sold to companies in the German speaking market, with a repository, deadline tracking, approvals and electronic signatures around an AI layer. They differ in what the AI does and in what each puts in writing. ContractHero's AI fills fields for parties, values, clauses and deadlines, links every value to the passage it came from, and leaves each field marked until a person confirms it. Inhubber's AI, in its Standard and Professional plans, summarizes contracts, extracts dates and payment schedules, and marks clauses red, yellow or green for financial and legal risk, including clauses that are missing. ContractHero publishes its terms, with a clause barring its language model providers from training on customer content, a named subprocessor list and a downloadable ISO 27001 certificate. Inhubber publishes no customer terms and offers its data processing agreement on request. It records every action in an audit trail anchored to a private Ethereum blockchain, and it publishes dated case studies from rebuy, Ansorge Logistik and 17er Oberlandenergie.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
ContractHero's AI reads each uploaded contract and fills the data the rest of the product runs on. After OCR and layout detection, it splits the document into chunks, finds the passages that match each field's prompt and writes the value, shaped by an optional instruction for filters and special cases. Fields cover parties, contract values, clauses and deadlines, and customers can write their own prompts per field and contract type, with a prompt assistant and a retrigger to run the analysis again. The same models write summaries, suggest a category from the existing ones, and power the assistant and the MCP connector. Deadline tracking, reminders, approval rules, templates, signatures and reports run on that data, and users can enter or correct any field by hand. ContractHero claims the analysis cuts review time per contract by up to 80 percent.
Inhubber's AI sits in the Standard and Professional plans, and the Basic plan runs without it. On those plans it writes a summary of each contract covering partners, payment terms and key obligations, extracts start and end dates, milestones and payment schedules, and analyzes financial and legal risk. The risk analysis flags language such as unlimited or unusually broad liability, marks clauses red, yellow or green, and points out missing clauses and deviations from standard terms. It reads PDF, DOCX and XLSX files, with OCR for scans. The repository with encryption on the user's side, deadline reminders, approval workflows, the blockchain audit trail and electronic signatures make up the rest of the product and all work without the AI. Ansorge Logistik and 17er Oberlandenergie describe using the AI summaries day to day, while rebuy runs Inhubber without the AI features.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Every field the AI fills carries a purple marker and a Jump to Source link that opens the contract at the passage the value came from. Tables are highlighted as a whole, images in scans show the nearest text, and where several passages match, the most likely one is marked. The assistant answers only from the contract's own data with source links, works without internet access, and does not answer what the contract does not say. ContractHero's help center explains the method: OCR, layout detection, chunking and similarity matching on the field prompt. It also notes that the models were trained mostly on English data, so English prompts are often the most reliable, and that summaries are reliable mainly in German and English. No accuracy or error rate is published. The help center warns that poor scans reduce accuracy and that bulk verification misses errors, and recommends checking amounts and deadlines field by field.
Inhubber's AI document analysis page claims accuracy levels over 90 percent, rivaling human reviewers, and attributes results to pre trained legal models, continuous learning and human validation. No method, test set, contract types or date stands behind the figure, and it appears on no other page. Risks are marked directly in the contract with colored indicators, so a reader sees the flagged clause in place. Extracted dates and summary points are not linked back to the passages they came from on any product page. The results widgets on Inhubber's pages show 0 percent in every slot. A November 2025 blog post claims time savings of up to 60 to 70 percent and says more than 95 percent of obligations are completed before their due dates, with no source for either figure.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
ContractHero separates what the AI fills from what a person confirms. AI values stay marked with a purple sparkle until a user verifies them, field by field or all at once, and a counter such as 6 of 7 verified shows what is still open. The assistant is read only and cannot change fields or tasks. The MCP connector only reads and respects every existing permission, and AI categorization chooses among existing categories and never overwrites a manual choice. ContractHero's EU AI Act page states that legal and financial decisions are always made by a person, not the AI, and that AI is labeled wherever it is used. The help center tells users to check the original or involve the legal department before acting on a summary in a legal decision. Deleting a contract can be made subject to an approval rule, and a write permission level allows editing without deletion.
Inhubber's AI page says material legal differences should still be reviewed by the responsible business or legal teams, and the German version leaves the final comparison with the responsible departments. The product assigns reviewer, editor, observer, approver and auditor roles, with configurable tasks, approvals and escalations, but these govern the contract workflow rather than the AI's output. A blog post says the machine learning learns from user corrections. No page describes whether summaries, extracted dates or risk colors take effect without a person confirming them, how a user corrects an extracted deadline, or what the AI may not be used for. The AI page describes the AI as an assistant to legal expertise, not a replacement for it.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
ContractHero names customers with figures, without dates. Schüttflix legal counsel Lukas Berg says the legal team saves about 20 percent of its working time after four years of use. NUMA Group, with more than 120 hotels in 14 countries, migrated more than 5,000 contracts, reports €100,000 saved in its first year and puts potential savings at €600,000 a year, with its senior associate general counsel quoted. Stadtwerke Leonberg reports €80,000 a year, hhpberlin €100,000 in its first year and Everphone more than 100 hours a year, and Wire says finding a contract went from 10 to 15 minutes to seconds. Logos include Audi, Eurowings, ZDF, MB Leasing, Dorint and Stadtwerke Stuttgart. None of the 16 success stories gives a date or says how its figures were measured. The company states more than 400 customers and over a million contracts under management.
Inhubber publishes dated case studies with named customers. Ansorge Logistik, a company of about 500 employees, uses the AI summaries daily, and Markus Sauter of its accounting and contract management team says a 40 page contract can be understood in a few sentences. Its cleanup found 5 to 10 outdated contracts still running (November 2025). At rebuy, Frank Kurzer, head of the legal department, credits deadline monitoring with avoiding unwanted extensions and saving thousands of euros, while the legal team still reviews contracts by hand (May 2025). 17er Oberlandenergie, a utility of 11 to 50 employees, uses AI summaries and overviews (September 2026), and TTI Group reported paper costs down 50 percent in 2021. Logos include EDEKA Baur, Ankerkraut, the OECD, Apetito, Kreis Paderborn and Stadtwerke Penzberg, and the site claims more than 10,000 users. The SAENTIS Family Office study shows only placeholder figures, though the legal page quotes it as saving around 80 percent of the time.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Clause 15 of ContractHero's terms (AGB), updated October 2026, says contract content sent to the language models is processed only to deliver the service. It is not used to train or improve the models of the subprocessor, the model provider or third parties. The clause adds that content is not passed to the model provider and that processing stays within the EU or EEA. The EU AI Act page repeats that customer data trains neither ContractHero's models nor anyone else's. Assistant chats are private to each user, even from administrators and the organization's owner. The security overview says content is encrypted on the user's device and that ContractHero itself has no access, without describing key management. Permissions are set per contract, and anyone who can see a contract sees all its fields. Privilege and work product are not mentioned.
Inhubber's security page, updated September 2026, says documents are encrypted just before upload, that only the machine on the user's side can read their contents, and that zero knowledge encryption and selective disclosure meet GDPR requirements. The AI page adds that even Inhubber cannot access the content, and the German privacy policy says Inhubber has no control over or access to it. No page explains how server side AI analysis reads documents that are encrypted on the user's side. Inhubber publishes no customer terms, and its data processing agreement is available on request. No page states whether customer contracts are used to train or improve its models. Privilege and work product are not mentioned.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
ContractHero's terms say it provides no legal advice (keine Rechtsberatung) and does not check contract content for accuracy or completeness. The values the AI reads are shown to the customer to review, and the customer must correct wrong ones or report them. The assistant help article says the assistant explains what a contract says and is not legal advice, leaving the legal assessment with the user, and the EU AI Act page says legal decisions are made by a person. ContractHero is sold to legal departments alongside finance, procurement and management, and its legal page says legal departments keep control over content and decisions. Nothing published mentions the German Legal Services Act (Rechtsdienstleistungsgesetz), the duties of in house lawyers, or limits by jurisdiction.
Inhubber's AI page says the AI acts as an intelligent assistant rather than replacing legal expertise, and the German page says the software does not replace a legal assessment. It recommends that material legal differences be reviewed by the responsible business or legal teams. The product is sold to procurement, finance, HR, logistics and sales as well as legal teams, and its AI analysis of legal risks is available to all of them. The German legal page carries the heading contract management for law firms while its text addresses in house legal departments. Inhubber publishes no customer terms, so no disclaimer of legal advice appears in a contract, and nothing addresses the German Legal Services Act or professional duties.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
ContractHero publishes an EU AI Act page. It classifies the contract analysis features as outside the high risk and prohibited categories of Regulation (EU) 2024/1689 and says the AI used is classed as general purpose AI. It commits to labeling AI wherever it appears and states that legal and financial decisions stay with a person. The page says the full assessment sits in ContractHero's trust center at trust.contracthero.com. In the product, AI values carry a purple marker until verified, and the help center explains the extraction method and its limits, including weaker results on poor scans and in languages other than German and English. No named owner for model behavior, release testing process, evaluation results or AI management certification is published. Nothing addresses whether extraction quality differs across contract types or languages beyond those notes.
Inhubber publishes no AI governance material. No responsible AI page, EU AI Act statement, named owner for model behavior, testing process, model card or AI management certification appears on its product, security, privacy or blog pages. The only statements about how the models behave are the claim of more than 90 percent accuracy and the reference to pre trained legal models, continuous learning and human validation, none of which comes with a method. The use case page promises human validation without saying who validates or when. Its ISO 27001 certificate covers information security for the platform's development, operation and support rather than model behavior. Nothing addresses whether risk flags differ across contract types or across languages, though Inhubber says the AI reads contracts in any language.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
ContractHero's terms set the data lifecycle. After termination the customer keeps read access for 30 calendar days to export, extendable once by 30 days, and ContractHero then deletes its content data, with backups purged within the backup cycle of at most 30 days. Deleted contracts go to a trash first, deletion can require approval, and a write permission level allows editing without deletion. A help article on the data processing agreement, dated February 2026, names the subprocessors. AWS in Frankfurt is the primary host, Modal Labs supplies compute and AI infrastructure, Qdrant runs the vector database, and Twilio and Crisp complete the list, all in the EU. The terms give 30 days' notice of subprocessor changes and two weeks to object, and commit ContractHero to inform the customer without undue delay of a security incident, with a description of its nature. Encryption is AES 256 at rest and TLS 1.3 in transit, and outside experts run penetration tests twice a year. No retention period is stated for assistant chats, which users can delete.
Inhubber's security page describes AES 256 encryption in transit and at rest, encryption on the user's side before upload, hosting on AWS and DigitalOcean in Frankfurt, and automated unit and integration tests with manual regression testing. Its privacy policies, dated June 2022 in German and January 2023 in English, cover personal data in general and name co founder Andre Sokolov as the contact. They say personal data is kept no longer than necessary, that name, email, blockchain address and password hash remain after deactivation, and that users may ask for deletion at any time, without a timeline. Subprocessors are described only by category, such as IT, hosting, error logging, advisers and payment, with no named list and no AI provider. Breach handling is a promise to follow applicable law. Nothing states what happens to contracts, summaries or risk analyses when a customer leaves. A trust center for key2contract GmbH sits on the SECJUR compliance platform.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
ContractHero's published terms (AGB), updated October 2026, cover the self service Start plan, and individually agreed plans run on a version that is not published. Under them, liability is capped at the fees the customer paid in the 12 months before the event, with no cap for intent, gross negligence, injury to life or health, guarantees and product liability. Liability for lost data is limited to what restoring it from proper customer backups would have cost. The Start plan carries no uptime commitment and no promise of immutable or audit proof storage. ContractHero gives no warranty on what the AI reads and does not check contract content, and the customer must correct wrong values. The customer indemnifies ContractHero against third party claims connected with that processing, including claims by its own employees, and no indemnity from ContractHero to the customer is published. German law applies, with Berlin as the venue.
Inhubber publishes no customer terms. Its footer, imprint, pricing page and free trial page carry no link to terms of use, a subscription agreement or general terms (AGB). No liability cap, warranty, indemnity or treatment of AI output can be read before signing. The data processing agreement is offered on request. The only statements about AI output are on product pages, which describe the AI as an assistant that does not replace a legal assessment and recommend that the responsible teams review material legal differences. The accuracy figure of more than 90 percent on the AI document analysis page carries no warranty or remedy.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
ContractHero documents its REST API and webhooks in public OpenAPI docs at api.contracthero.com/docs, available from the Professional plan with an access token. The MCP connector, an add on, gives Claude, ChatGPT, Copilot and Gemini read only access to contract data under each user's permissions, and administrators can switch it on or off for the organization. The Word add in saves a finished document from Word into ContractHero as a PDF, where the AI analysis runs. Customers set up HubSpot, Power BI, email import and a read only iCal feed for Outlook, Google and Apple calendars themselves, and the Slack app sends notifications and takes slash commands. SharePoint, OneDrive and DocuSign connect on request. The integrations page also calls SAP, DATEV, Salesforce, Dynamics, Personio and Lucanet native, without describing what any of them moves.
Inhubber's integrations page lists Microsoft SharePoint, Microsoft single sign on, Nect for identity checks and QES signatures, Evaco, Outlook Calendar, Google Docs and Sheets, and migration from DocuSign and Adobe Sign. SAP is marked beta, and Microsoft Office 365, Salesforce and Shopify are marked upcoming. API integrations are part of the Professional plan, and a feature FAQ mentions automated SharePoint sync, but the site publishes no API documentation or description of what any connector moves. A help center at help.inhubber.com sits alongside the main site. The signature module imports contracts signed elsewhere and exports signature reports as PDFs with timestamps and participant identities.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
ContractHero is delivered as software as a service from Frankfurt. Its hosting page says storage, processing and archiving take place only in certified data centers in Frankfurt, and the data processing agreement summary names AWS in Frankfurt as the primary host. The AI runs on language models provided as a service by subprocessors, and the terms put that processing within the EU or EEA, while ContractHero's home page places servers and AI models fully in Germany. Modal Labs supplies compute and AI infrastructure and Qdrant the vector database, both listed in the EU. Enterprise customers can send backups to their own server or bucket over S3, SFTP or FTPS, with eu-central-1 as the default region. No private cloud or on premises option is published.
Inhubber's security page says contract data is stored only in German data centers, on AWS and DigitalOcean in Frankfurt am Main. Where the AI processing runs is not stated separately. The AI document analysis page offers cloud, hybrid or on premises deployment, while the product and feature pages describe a cloud service only. The privacy policies say Inhubber does its best to keep data within the EEA and treat use of the service as consent to transfers abroad under standard contractual clauses. No tenancy model is published, and the blockchain that anchors the audit trail is described both as a consortium and as a private Ethereum network.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
ContractHero publishes its ISO/IEC 27001:2022 certificate as a download. Proks Certification GmbH in Düsseldorf issued certificate DE-IS-20240084 for a B2B SaaS platform specializing in contract management, valid from 21 March 2024 to 20 March 2027. It was reissued on 9 February 2026 against a Statement of Applicability dated 20 January 2026, and it shows no accreditation body. ContractHero says the certification covers the whole company and is audited every year. ISO 27017, ISO 27018 and CSA STAR CCM v4.0 belong to its Frankfurt data centers rather than to ContractHero, and the home page refers to ISO 9001 certified data centers. ContractHero also runs a trust center at trust.contracthero.com, where its EU AI Act page says the AI assessment is published. Outside experts run penetration tests twice a year, and the security policy is dated February 2024.
Inhubber's security page states that the company holds ISO/IEC 27001:2022 certification from Proks Certification GmbH, an auditor it describes as accredited by DAkkS. The certified scope covers the development, operation and support of the platform with its IT infrastructure, processes and personnel. No certificate number, issue date or download is published on that page. A case study by the compliance platform SECJUR describes taking key2contract from first inquiry to a passed ISO 27001 audit in two months, and a trust center for the company sits on SECJUR's platform. An older blog FAQ attributes ISO 27001 to the data centers instead. The signature FAQ says signature reports meet SOC 2 audit requirements, though no SOC 2 attestation is listed.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
ContractHero does not name the language models it uses or their maker. Its terms say the models are provided as a service by one or more subprocessors and that content is not passed to the model provider. The data processing agreement summary names Modal Labs for compute and AI infrastructure and Qdrant for the vector database, both in the EU. The help center describes the architecture: OCR, layout detection, chunking, similarity matching on each field's prompt and an answer shaped by an optional instruction, with training data that is mostly English. The AI analysis page says the AI is classified as general purpose AI. Subprocessor changes come with 30 days' notice and two weeks to object under the terms. The MCP help article does not say what contract data reaches Claude, ChatGPT, Copilot or Gemini when a user asks questions through the connector.
Inhubber does not name the models behind its summaries and risk analysis, their provider, or where they run. Its pages refer to pre trained legal models, natural language processing and machine learning that learns from corrections, and its AI page mentions ChatGPT only as a point of comparison. The use case page says the models learn continuously, without saying from whose data. The privacy policies describe subprocessors by category without naming an AI provider, and no change notice for models or subprocessors is published. The security page names AWS and DigitalOcean as hosts, which covers storage rather than the models. Whether the AI runs on Inhubber's own servers in Frankfurt or with an outside provider is not stated.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
ContractHero's pricing page lists three plans, all quoted on request. Essential covers 500 contracts and 5 users with AI analysis and the assistant. Professional covers unlimited contracts and 15 users and adds the Word add in, unlimited simple electronic signatures, the API and reporting. Enterprise covers 50 users and adds multi entity groups, custom single sign on, approval rules and a service level agreement. The MCP connector and eIDAS QES signatures are add ons. A help article on billing gives Essential from €390 a month, billed yearly in advance by SEPA or card. The terms set a 12 month term that renews automatically unless cancelled three months ahead, and a 7 day trial with no payment method. The pages disagree in places, listing custom single sign on both as an add on and as part of Enterprise, and simple signatures as part of every plan on the signature page.
Inhubber's pricing page lists Basic, Standard and Professional plans without prices. Basic and Standard carry a request for a price and Professional a contact sales link. Basic allows 50 contract files per user and 1,000 documents and has no AI. Standard and Professional add AI summaries and financial and legal risk analysis, and Professional adds API integrations. The page mentions per contract pricing, a saving of up to 33 percent on annual billing and a free trial without stating its length. G2's listing, supplied by the vendor, shows Basic from $16.99 and Standard from $44.99 per seat a month, figures that do not appear on Inhubber's own site.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
ContractHero is built for the German Mittelstand and sells across Germany, Austria and Switzerland to mid sized companies and groups with several legal entities. Its home page addresses management, legal and compliance, finance, procurement and IT, with a dedicated page for legal departments, and it lists manufacturing, energy, healthcare, SaaS, tourism, real estate, retail and municipal utilities among its industries. Use cases include buy and build, DORA, NIS2, holdings, due diligence and audits. The help center states several limits. AI summaries work on PDFs and are reliable mainly in German and English, and extraction covers more than 30 languages with eight OCR script packs. Multi entity groups are part of Enterprise, and permissions apply per contract, not per field. The help center is in German only, and law firm use is not addressed.
Inhubber is sold to businesses of all sizes, from SMEs to large organizations and public bodies. Its team pages cover procurement, finance and controlling, legal, HR, logistics and sales. Its industry pages cover retail, the public sector, energy, manufacturing, financial and regulated firms, healthcare, real estate, education, hospitality, e commerce and professional services, and a use case covers holdings, groups and subsidiaries. The AI is said to read contracts in any language, with German, English and French given as examples, and the interface is in English and German. Case studies come from logistics, energy, retail and a family office, and the legal page speaks to legal counsel, compliance officers and paralegals. The German legal page addresses law firms in its heading and legal departments in its text. No limits are stated for contract types, languages or company size.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
Clause 15 of ContractHero's terms (AGB), updated October 2026, says content sent to the language models is processed only to deliver the contracted service. It is not used to train or improve the models of the subprocessor, the model provider or third parties, and it is not passed to the model provider. The EU AI Act page adds that customer data trains neither ContractHero's own models nor anyone else's, and help articles on the AI analysis and the MCP connector repeat that there is no training on customer data.
Assistant chats stay private to each user. The published terms cover the self service Start plan, and the version for individually agreed plans is not published.
Inhubber publishes no customer terms, subscription agreement or general terms, and its data processing agreement is available only on request. No product, security, privacy or blog page states whether customer contracts are used to train or improve the models behind its summaries and risk analysis. The security page says documents are encrypted on the user's side and that zero knowledge encryption and selective disclosure meet GDPR requirements, and the AI page says even Inhubber cannot access the content.
A blog post says the machine learning learns from user corrections, without saying whose data that learning draws on or whether customers can turn it off. The privacy policies cover personal data rather than contract content.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
Customers decide what stays in the account during the term. Deleted contracts go to a trash first, deletion can require approval, and assistant chats are private to each user and can be deleted by that user. After termination the customer keeps read access for 30 calendar days, extendable once by 30 days. ContractHero then deletes its content data under clause 15 of the terms, with backups purged within the backup cycle of at most 30 days.
Enterprise customers can also send backups to their own server or bucket. No retention period is stated for assistant chats left in place, or for data held by Modal Labs, which supplies the AI compute. The terms say content is not passed to the model provider.
Inhubber's privacy policies say personal data is kept no longer than necessary, list the account details kept after deactivation (name, email, blockchain address and password hash), and let users ask for deletion at any time without a timeline. No page states how long contracts, AI summaries or risk analyses are kept, whether they are deleted when a customer leaves, or what any AI provider retains. The security page describes hosting on AWS and DigitalOcean in Frankfurt with encryption at rest, without a deletion schedule.
With no customer terms published, no contractual retention period exists to read, and the data processing agreement is available only on request.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
ContractHero keeps its own permission model, documented in its help center. A standard model and a rule based model (APC, from the Professional plan) control which users see which contracts, and permissions apply per contract, so anyone who can see a contract sees all its fields. A write level allows editing without deletion, multi entity groups are handled as teams on the Enterprise plan, and assistant chats are private even from administrators.
Access delegation lets an outside legal team see only defined contract types, with ContractHero's own example of an external legal department reviewing NDAs and employment contracts. The MCP connector only reads and follows every existing permission. The change log cannot be edited, though read and download events are not consistently logged in it.
Inhubber keeps its own permission model. Users take reviewer, editor, observer, approver and auditor roles, tasks and approvals are assigned per contract, and the security page describes documents encrypted on the user's side with selective disclosure, so only authorized parties can read them. Microsoft single sign on is listed among its integrations. Every action is recorded in an audit trail anchored to a private Ethereum blockchain, which stores cryptographic proofs rather than contents.
Groups with subsidiaries are a stated use case. No page describes how AI analysis reaches documents that are encrypted for specific users, or how one customer's data is kept apart from another's in the Frankfurt hosting.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
Clause 15 of ContractHero's terms serves as its data processing agreement under Article 28 GDPR. It says that where EU or member state law obliges ContractHero to process data further, ContractHero informs the customer of that legal requirement before processing. The same clause commits it to inform the customer without undue delay of security incidents and of inspections by a data protection authority. ContractHero's hosting page names Frankfurt as the only location for storage and processing, and says the United States CLOUD Act cannot reach data processed in Germany, technically or legally.
No transparency report is published, and the terms do not address requests made under the law of countries outside the EU.
Inhubber's privacy policies, the only legal documents on its site, do not address requests from authorities or other third parties for customer data, and no customer terms or data processing agreement are published. The policies say Inhubber does its best to keep data within the EEA and treat use of the service as consent to transfers abroad under standard contractual clauses. The security page says documents are encrypted on the user's side and that Inhubber cannot read their contents.
A trust center for key2contract GmbH sits on the SECJUR compliance platform. No transparency report is published, and nothing says whether a customer would be told of a request.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
ContractHero's AI reads the customer's own contracts and fills fields from passages in them, and the assistant answers only from the open contract, without internet access. It does not retrieve case law or legislation. Customers steer extraction with their own prompts and instructions per field and contract type. The help center says the underlying models were trained mostly on English data, and ContractHero does not name the models or describe their training data. Templates and clauses used for drafting are the customer's own, kept with versioning and comparison.
Inhubber's AI reads the customer's own contracts to summarize them, extract dates and flag risks, and does not retrieve case law or legislation. It handles PDF, DOCX and XLSX files with OCR for scans, and Inhubber says it reads contracts in any language, naming German, English and French. Its pages attribute results to pre trained legal models and continuous learning without naming the models, their provider or the data they were trained on.
The risk analysis compares clauses against standard terms and flags missing clauses without saying whose standard terms it uses or how customers set their own.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
ContractHero manages and reads contracts and does not cite case law or legislation, so a citator sits outside the product. Its clause library and templates are maintained by the customer with versioning and comparison, and nothing published describes flagging a clause after a change in the law. The calculated last possible notice date is a formula of contract end minus notice period, fed by the customer's own fields. The home page pitches DORA and NIS2 audits as use cases, and how the product follows changes to those regimes is undescribed.
Inhubber manages, signs and analyzes contracts and does not cite case law or legislation, so a citator sits outside the product. Its risk analysis flags missing clauses and deviations from standard terms, marking them red, yellow and green, and names unlimited or unusually broad liability as one pattern it catches. The CLM page says the AI suggests missing clauses after scanning each signed contract. Nothing published says how those standards are kept current with changes in the law or in which jurisdictions they were drawn up.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
The assistant answers only from the open contract, and ContractHero states that what is not in the contract is not answered. Off topic questions get a fixed reply saying the assistant only helps with the customer's own data. Extracted values carry a source link and stay marked until a person verifies them, and where several passages match, Jump to Source marks the most likely one. AI categorization picks only from the customer's existing categories and leaves a manual choice untouched.
No confidence measure is shown for a field, and the help center does not say what extraction writes when a value is absent from the contract.
No page describes what Inhubber's AI does when it cannot find a date or classify a clause. Risk flags come as red, yellow and green markings in the contract, and no confidence measure is shown for summaries or extracted values. The AI document analysis page claims accuracy above 90 percent and recommends that the responsible business or legal teams review material legal differences. A blog post says the machine learning learns from user corrections, and the use case page mentions human validation without describing when it happens.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
The AI Hallucination Cases database maintained by Damien Charlotin, which records court decisions worldwide that address hallucinated AI content and the tool involved where known, has no entry naming ContractHero. ContractHero stores and reads contracts for companies rather than producing court filings, so its output does not ordinarily reach a brief. Its assistant answers only from the contract that is open.
The AI Hallucination Cases database maintained by Damien Charlotin, which records court decisions worldwide that address hallucinated AI content and the tool involved where known, has no entry naming Inhubber or key2contract. Inhubber stores, signs and analyzes contracts for companies rather than producing court filings, so its output does not ordinarily reach a brief. Its AI summaries and risk flags stay inside the contract record.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
ContractHero's terms say it provides no legal advice and does not check contract content for accuracy or completeness. The assistant help article says the assistant is not legal advice and leaves the legal assessment with the user, and the EU AI Act page keeps legal decisions with a person. Its legal department page says legal teams keep control over content and decisions. No professional conduct guidance is named, and neither the German Legal Services Act nor the rules for admitted in house lawyers (Syndikusrechtsanwälte) are mentioned.
Inhubber's AI pages say the AI assists rather than replaces legal expertise and does not replace a legal assessment, and they recommend review of material legal differences by the responsible business or legal teams. The product is sold to procurement, HR, sales and other teams outside legal, which receive the same AI analysis of legal risks. No professional conduct guidance or ethics opinion is named, and with no customer terms published, no advice disclaimer appears in a contract.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
ContractHero is bought by companies to manage their own contracts, with legal departments one user group among finance, procurement and management. Its named customers are companies rather than law firms, so no client bill sits in the loop. Its savings claims address the buyer's own costs: up to 80 percent less review time per contract, about 20 percent of the Schüttflix legal team's working time, and euro savings at NUMA Group, hhpberlin and Stadtwerke Leonberg. Nothing published addresses fee treatment of AI assisted work for a firm that bills a client.
Inhubber is bought by companies to manage their own contracts across procurement, finance, HR, logistics, sales and legal, and its named customers are companies and public bodies, so no client bill sits in the loop. rebuy's legal department uses deadline monitoring to avoid unwanted contract extensions, a saving on the company's own contracts. Its German legal page is headed contract management for law firms while its text speaks to legal departments, and a November 2025 blog post aimed at lawyers claims time savings of up to 60 to 70 percent. Nothing published addresses fee treatment of AI assisted work for a firm that bills a client.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
A help article on the data processing agreement dated February 2026 names ContractHero's subprocessors: AWS in Frankfurt, Modal Labs, Qdrant, Twilio and Crisp. The trust center at trust.contracthero.com has a subprocessor page, and the terms say a current overview is kept in the customer account or sent on request in text form. Subprocessor changes come with 30 days' notice and two weeks to object. The ISO 27001 certificate and the EU AI Act page are public, while the full data processing agreement is signed through a PandaDoc portal. The language model behind the AI is not named.
Inhubber offers a data processing agreement on request and publishes no subprocessor list, describing subprocessors in its privacy policies only by category. A trust center for key2contract GmbH sits on the SECJUR compliance platform, and a SECJUR case study describes the company passing its ISO 27001 audit two months after first contact. The security page names AWS and DigitalOcean in Frankfurt as hosts and states the certification.
No AI provider is named, so a customer cannot pass a model provider list to its own stakeholders from published material.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Every AI filled value is marked and linked to its source passage, and the verification counter shows which fields a person has confirmed. ContractHero commits to labeling AI wherever it is used. The change log cannot be edited, but read and download events are not consistently logged, it has no one click export, and permanent deletion removes a contract's log with it. Nothing records which model produced a value. ContractHero's output is a contract register and reports rather than court filings, and no disclosure template is published.
Inhubber records every action, from edits to signatures, in an audit trail anchored to a private Ethereum blockchain, and signature reports export as PDFs with timestamps and participant identities. Only cryptographic proofs, not contents, are written to the blockchain. Signature options run from simple electronic signatures to QES through Nect, and the FAQ claims all three eIDAS levels while the product offers no separate advanced signature.
Nothing published says whether AI summaries or risk flags are marked as machine generated in that trail or which model produced them. Inhubber's output is a contract repository, signatures and reports rather than court filings, and no disclosure template is published.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Primary Law Corpus Provenance
- Good Law Verification
Which one fits
Choose ContractHero if
- You want every AI value traceable and confirmed by a person. ContractHero marks each field the AI fills and links it to the passage it came from through Jump to Source. Values stay marked until a user verifies them, field by field or all at once, and a counter shows how many are still open. The assistant answers only from the open contract.
- You need the AI and data terms in writing before you sign. Clause 15 of ContractHero's terms says content sent to the language models is used only to deliver the service and never to train the provider's or third party models. A help article names AWS in Frankfurt, Modal Labs, Qdrant, Twilio and Crisp as subprocessors, with 30 days' notice of changes.
- You want to see a starting price and connect your own tools. A ContractHero help article gives the Essential plan from €390 a month, billed yearly, after a 7 day trial with no payment card. Public OpenAPI docs cover a REST API and webhooks from the Professional plan, and an MCP connector gives AI assistants read only access under each user's permissions.
Choose Inhubber if
- You want a risk view of each contract, not only its data. Inhubber's AI analysis flags financial and legal risk such as unlimited or unusually broad liability, marks clauses red, yellow or green in the contract itself, and points out missing clauses and deviations from standard terms. It also writes a summary covering partners, payment terms and key obligations.
- You want every action on a contract recorded and anchored. Inhubber records edits, approvals and signatures in an audit trail anchored to a private Ethereum blockchain, which stores cryptographic proofs rather than contents. Signature reports export as PDFs with timestamps and participant identities, and contracts can be signed with a simple, blockchain sealed or QES signature through Nect.
- Some of your teams only need storage and signatures. Inhubber's Basic plan runs without AI, with 50 contract files per user and 1,000 documents, and the AI arrives with the Standard and Professional plans. Its dated case studies show both patterns, with Ansorge Logistik using AI summaries daily and rebuy's legal department relying on deadline monitoring without the AI features.
In summary
ContractHero
ContractHero is contract management software from ContractHero GmbH, founded in Berlin in 2020, for mid sized and larger companies in Germany, Austria and Switzerland. Its AI reads each uploaded contract, fills fields for parties, values, clauses and deadlines, and links every value back to its source passage, and a person confirms each field before it counts as verified. According to the AI Legal Index, its published terms bar the language model providers from training on customer content and keep that processing in the EU or EEA, with storage on AWS in Frankfurt. An MCP connector gives Claude, ChatGPT, Copilot and Gemini read only access under each user's permissions. ContractHero holds an ISO 27001 certificate, names NUMA Group, Schüttflix, Eurowings and ZDF as customers, and starts its Essential plan at €390 a month, billed yearly.
Inhubber
Inhubber is contract management software from key2contract GmbH in Berlin, sold to companies of all sizes for procurement, finance, legal, HR, logistics and sales teams. It stores contracts in a repository encrypted on the user's side, routes approvals, and records every action in an audit trail anchored to a private Ethereum blockchain, with simple, blockchain sealed and QES signatures. According to the AI Legal Index, its AI, included in the Standard and Professional plans, summarizes contracts, extracts dates, payment schedules and obligations, and marks clauses red, yellow or green for financial and legal risk. Data is hosted on AWS and DigitalOcean in Frankfurt, and Inhubber states an ISO 27001:2022 certificate from Proks Certification. It publishes no prices or customer terms and offers a data processing agreement on request.
Questions buyers ask
ContractHero vs Inhubber: which is better for a German mid sized company?
Both are Berlin products built for companies in the German speaking market, with Frankfurt hosting and an ISO 27001 certificate from Proks Certification. ContractHero suits a company that wants AI extraction with a source link and human confirmation on every field, published terms and a stated starting price. Inhubber suits a company that wants AI risk flags inside the contract, a blockchain anchored audit trail, and a plan without AI for teams that only store and sign. From the AI Legal Index, based on each vendor's own published materials as of October 10, 2026. No vendor pays for placement.
Does ContractHero or Inhubber train AI on customer contracts?
ContractHero's terms, updated October 2026, say content sent to the language models is processed only to deliver the service and is not used to train or improve the models of the subprocessor, the model provider or third parties. Its EU AI Act page adds that customer data trains no model, its own included. Inhubber publishes no customer terms, and no page says whether contracts train its models. A blog post says its machine learning learns from user corrections. From the AI Legal Index, based on each vendor's own published materials as of October 10, 2026. No vendor pays for placement.
Where do ContractHero and Inhubber store data?
Both keep data in Frankfurt. ContractHero stores and processes on AWS in Frankfurt, its terms keep language model processing in the EU or EEA, and its AI compute provider Modal Labs and vector database Qdrant are listed in the EU. Inhubber hosts contract data on AWS and DigitalOcean in Frankfurt and does not say where its AI processing runs. Its privacy policies treat use of the service as consent to transfers abroad under standard contractual clauses. From the AI Legal Index, based on each vendor's own published materials as of October 10, 2026. No vendor pays for placement.
How much do ContractHero and Inhubber cost?
ContractHero's pricing page quotes all three plans on request, and a help article on billing gives Essential, with 500 contracts and 5 users, from €390 a month billed yearly in advance. Terms run 12 months and renew unless cancelled three months ahead. Inhubber shows Basic, Standard and Professional without prices, with a free trial and up to 33 percent off for annual billing. Its G2 listing, a third party source, shows Basic from $16.99 and Standard from $44.99 per seat a month. From the AI Legal Index, based on each vendor's own published materials as of October 10, 2026. No vendor pays for placement.
What do ContractHero and Inhubber both leave unpublished?
Neither names the language model behind its AI or the company that makes it, and neither publishes an accuracy or error rate with a method. Neither names an owner for model behavior or publishes evaluation results, and neither addresses privilege or work product. Neither publishes a transparency report on government requests, and neither records in its change log or audit trail which model produced an AI value. From the AI Legal Index, based on each vendor's own published materials as of October 10, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Inhubber's security page says documents are encrypted on the user's side and that even Inhubber cannot read their contents, while its AI analyzes those documents on the server, and Inhubber does not explain how the two fit together. Its claim of accuracy above 90 percent carries no method. ContractHero's published terms cover the self service Start plan, and individually agreed plans run on a version that is not published. Neither company names the language model behind its AI. Neither vendor reviewed this page.