Contractzy vs Icertis: how they compare in 2026
Contractzy and Icertis both apply company positions to contract review, but they expose different paths into that work. Contractzy starts with an uploaded or generated risk guidebook, highlights departures, and carries revisions into its approval and signature process. CORA also extracts commitments for ongoing assignment and tracking. Icertis separates guided creation and negotiation into Vera agents. Composer gathers NDA or statement of work details through conversation and assembles a draft from approved clauses and rules. Redline then identifies deviations, explains suggested edits, and logs reviewer actions. Teams evaluating a controlled business drafting process therefore have a concrete reason to consider Icertis. Contractzy makes a different case where the immediate requirement combines guidebook review, defined agreement volumes, and flexible hosting. In both, the human reviewer remains responsible for consequential contract decisions.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
CORA AI powers contract risk analysis, summarization, metadata extraction, and obligation management inside a broader contract lifecycle platform. Review starts with company guidebooks, while extraction turns scanned PDFs, images, and Word files into searchable information. Obligation management creates owners, milestones, deadlines, and renewal alerts from agreements. Templates, clause libraries, approvals, signatures, version history, and the repository remain useful without model inference. Essentials and Professional also separate conventional contracting functions from the fuller AI package in Enterprise. The models therefore run substantial review and analysis functions, while established workflow and storage features remain a separate part of the product.
Icertis offers Icertis Copilots, a contract intelligence engine that extracts clauses, obligations and risk, and Vera, an agent layer released across Engage, Operate and Analyze in 2026. The vendor says Vera acts autonomously within boundaries the customer sets. These sit on a contract platform for authoring, negotiation, approval, execution, obligation management and analytics, which runs without the models and was sold as Icertis Contract Management before the AI positioning. The rename to Contract Intelligence added an AI layer to that platform rather than rebuilding it.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Risk analysis highlights ambiguous clauses and departures from company guidebooks, then lets reviewers inspect changes through tracked redlines. CORA AI also extracts parties, dates, monetary terms, and obligations from uploaded agreements. Accuracy claims include 98% for risk detection, 95% or more for metadata extraction, and up to 99% in the pricing FAQ, without a defined evaluation set or error breakdown. The contract text supplies context, but a retrieval method with linked primary legal authority and citation treatment is unspecified. Severity labels describe contractual risk rather than confidence in an answer. Critical decisions still call for human review under the pricing guidance.
Icertis describes a contract intelligence engine that extracts clauses, obligations and risk and turns them into queryable data, and an intelligence layer across the enterprise that it says understands business and industry context. It publishes no accuracy figure, hallucination rate, test set or evaluation, and does not describe how an output links back to a source the user can open. One Gartner Peer Insights reviewer says their organization has not been impressed with the Discovery tool AI.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Reviewers upload a Word or PDF guidebook or generate one with AI, scan an agreement, and inspect highlighted risks and tracked revisions. Editable guidebooks encode company requirements, and alerts identify departures or high risk clauses. Contracts failing mandatory criteria are prevented from advancing until compliance is ensured. Legal teams retain control over precise edits, with approval routing and version history supporting review before execution. The pricing guidance recommends human review for critical decisions. The remaining uncertainty is the control path after an incorrect classification: the criteria configuration, override permissions, and escalation route for an AI error are not specified.
Vera Composer gathers NDA or statement of work details through conversation, converts them into structured context, and assembles a draft using approved templates, clauses, and business rules. Vera Redline compares uploaded contracts with playbooks, exposes clause references and explanations, and proposes targeted changes for review. Exceptions escalate, while humans retain final legal judgment on complex or nuanced issues. Edits, clause selections, and reviewer actions are logged. The broader platform lets customers set boundaries for autonomous agents. Exact stop thresholds, configuration permissions, and correction procedures after an accepted error remain unspecified, although the review surface and human role are now explicit.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Legal leaders at Bajaj Markets, Bridgestone, and Easebuzz describe actual use of the platform. Manish Jain emphasizes responsive support; Reni Verghese describes managing contracts against timelines; Nitin Bhuwania describes reducing administrative effort and retrieving executed agreements after digitization. These accounts identify customers and concrete activities, although they do not supply dated before and after measurements. Separate CORA AI claims include an internal study of faster summarization and improved extraction, without a disclosed sample or method. Implementation generally takes two weeks to one month depending on integrations, customization, and migration. That estimate describes rollout effort rather than a measured customer outcome.
Icertis publishes customer quotes that identify the customer by industry and revenue band rather than by name. Among them are an IT services company with more than $30 billion in annual revenue and a healthcare and biotech company with more than $1 billion. It says 30 percent of the Fortune 100 are customers, across more than 90 countries and millions of contracts. Gartner named Icertis a Customers' Choice in the 2025 Peer Insights Voice of the Customer report for CLM, with 93 percent of customers recommending the platform across 84 ratings. No published case study pairs a named customer with measured results.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
The agreement limits personal data use to delivering, maintaining, securing, and improving the contracted services under customer instructions. It covers contract files, attachments, metadata, communications, approval records, and access logs, and rules out selling customer data or unrelated advertising uses. Subprocessors must accept protections at least as strong as the agreement. Role permissions restrict visibility to authorized departments and users, while production access follows least privilege. The improvement permission contains no explicit model training exclusion. Privilege preservation, work product treatment, matter isolation during retrieval, and foundation model retention commitments remain unspecified, so these provisions do not settle every confidentiality question for a law firm.
The SaaS Subscription and Services Agreement sets out role based access control, identity provider authentication, audit logs of every user action, encryption at rest and in transit, and a single tenant option. Section 4.5 returns Subscriber Data on request and permits destruction if it is not requested within five days of termination. Section 5.2 lets Icertis use Subscriber Data, including output, to maintain, develop and improve the service, provided the data is not shared with third parties and the Subscriber stays anonymous. The agreement does not address attorney client privilege or work product, or say how the Vera agents respect user permissions. A 2017 company news item describes storage on GDPR compliant cloud infrastructure with encryption at rest and in transit. Icertis also links a Trust Center from its site.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Legal departments use CORA AI to identify contractual risks, make edits, and manage approvals, while procurement, sales, finance, and HR users share the broader workflow. Human decision authority is explicit in the product positioning, and critical decisions are subject to a recommendation for human review. The CORA AI introduction also directs customers to consult their legal departments about regulatory implementation. Those operating instructions do not establish an advice versus software boundary, permitted legal jurisdictions, or a position on unauthorized practice. The software terms disclaim warranties generally without a specific legal advice disclosure. Nonlawyer participation is supported without a corresponding professional responsibility framework.
Icertis sells the platform across legal, procurement, sales, finance and HR, where it handles NDAs, service agreements and HR paperwork alongside commercial contracts. Its AI drafts, redlines and negotiates for all of those users. The product pages, company section and research library take no position on where a tool ends and legal advice begins, and say nothing about competence or supervision duties. They set no jurisdiction limits, although Icertis operates in more than 90 countries. The human first framing describes how the product is designed rather than a position on professional responsibility.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
The CORA AI introduction describes pretrained language models refined through legal expert feedback, regular updates, and testing across legal scenarios. That establishes a quality aspiration but leaves release criteria, review ownership, evaluation sets, and results across contract types or jurisdictions unspecified. The model training description refers broadly to contracts, legal materials, and precedents rather than a traceable evaluation program. Prajot Borkar is the named data protection officer, responsible for privacy compliance; that role does not establish accountability for model behavior. Company guidebooks let customers impose their own contract policies, but they are distinct from governance of the vendor's models and training process.
Icertis calls itself AI native and human first, says its agents operate within boundaries the customer sets, and publishes annual research on buyer concerns about AI. That research reports that 55 percent of contracting leaders cite data output quality as a significant concern and 44 percent lack sufficient trust in autonomous AI. The product pages and research library describe no AI governance framework, no AI management certification such as ISO 42001, no named owner of model governance and no testing before release. They say nothing about uneven output across matter types, parties or populations.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
The May 2026 agreement identifies eight subprocessors and their functions, including AWS for hosting, Bedrock inference, and Textract processing. Controls include encryption, least privilege access, internal multifactor authentication, audit logs, restricted production access, monitoring, and backups. Incident procedures cover identification, investigation, management, and response. Customer notification follows a confirmed personal data breach without undue delay where legally required, rather than an unconditional fixed deadline. Data remains as long as needed for service, legal, dispute, or security purposes. Return or deletion follows a written request at termination within a commercially reasonable timeframe, with unspecified backup schedules and legal exceptions.
Section 4.5 of the agreement returns Subscriber Data on request at no fee and permits destruction if it is not requested within five days of termination. Exhibit B sets out strict role based access, identity provider authentication with multifactor support, audit logs of all user actions, encryption at rest and in transit, Azure network security groups and threat monitoring. It also commits Icertis to notify the Subscriber of any breach resulting in loss or unauthorized disclosure of Subscriber Data, under a documented incident process. Section 6.1 bars sale of personal data and its combination with other sources, while section 5.2 permits use of Subscriber Data to develop and improve the SaaS. A List of Standard Sub-Processors, in a version dated June 2023, is published on the foundation page.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
The software terms cap the operator's and suppliers' liability at the amount the client actually paid. Service comes as is and as available, with broad exclusions for warranties, fitness, noninfringement, accuracy of performance, and correction of errors. The agreement does not attach an indemnity, insurance commitment, or enforceable accuracy warranty to CORA AI output. It also excludes responsibility for incomplete or corrupt backups and places independent backup responsibility on the client. India is the defined country for governing law, with informal dispute resolution first. These terms allocate general software risk without promising a remedy for an incorrect contractual recommendation.
Section 9.1 of the agreement gives a defense and indemnity for third party intellectual property claims, for claims by Icertis subcontractors or personnel, and for gross negligence causing injury or property damage. It states an exclusion for Subscriber Data. Section 10.1 excludes consequential loss, and section 10.2 caps each party at the amounts Icertis received in the preceding twelve months. Section 8.2 warrants noninfringement, professional performance and material conformity to the documentation, with a correction remedy and a termination right. Section 10.4 commits Icertis to carry commercial general liability cover of $1 million per occurrence and $2 million in aggregate. It adds technology errors and omissions cover including cyber liability of $5 million, umbrella cover of $5 million and employer's liability. The cover comes from a carrier rated A minus, runs for the term and one year after, and a certificate is available on request. The agreement gives AI output no separate warranty. An AI Acceptable Use Policy sits on the foundation page as an addendum to the agreement.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Salesforce users can create, approve, and sign contracts within their CRM, while HubSpot data can generate agreements and feed approval and signature steps. Oracle supports contract creation and management, and Jira tickets initiate creation and approvals. Slack brings contract updates and actions into team conversations; Gmail supports workflows from the inbox. DocuSign, Adobe Sign, and UAE Pass provide signature connections, with Zoho also supporting contract generation and tracking. Custom APIs and integrations are available. Field mappings, authentication setup, synchronization conflicts, and permission propagation are not described, so the connection list does not establish a complete implementation specification for each workflow.
Icertis publishes a Native Integrations page with prebuilt adapters for SAP, Microsoft, Salesforce, Workday, Adobe Sign and DocuSign, each described by what it moves. The SAP Ariba adapter syncs procurement contracts, line items and suppliers, and the SAP S/4HANA adapter brings buy side supplier master data into the platform. For ERP and finance, adapters for Microsoft Dynamics 365 Finance and Operations and for Workday Financials sync procurement contracts, suppliers and financial data. The Salesforce CRM and CPQ adapter creates contracts from accounts, opportunities and quotes, with two way sync of deal and pricing data, and a Dynamics 365 Sales adapter keeps contract and sales data in step. The Adobe Sign and DocuSign adapters return signed agreements and audit trails to the platform. Microsoft Teams, Microsoft 365 for the web and Outlook connections cover collaboration, and SAM.gov and federal clause adapters serve public sector work. Licensed public APIs and connections to OpenAI, Claude, Microsoft Copilot and SAP Joule agents round out the list. The page does not describe setup or what an administrator configures, and it names no document management or identity connector. The platform runs on Microsoft Azure, with Microsoft as a strategic partner, and its named competitors include SAP Ariba and DocuSign CLM.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
AWS cloud hosting is the standard delivery route, with an additional single tenant cloud option and deployment on customer premises. Implementation scope depends on integrations, migration, and customization, and Enterprise includes custom integration and deployment options. The agreement identifies AWS operations as global, including India, Singapore, and the United States, while other processors operate in additional global locations. Cross-border safeguards may include applicable standard contractual clauses. These locations describe the processor network rather than selectable customer residency regions. The division between contract storage, model inference, OCR processing, and backup locations is not specified for each deployment option or subscription tier.
Exhibit B of the SaaS Subscription and Services Agreement states that the platform is hosted on Microsoft Azure and that the Subscriber may select the Azure data center at the outset of the subscription. Production backups sit on geo replicated Azure storage. Exhibit A-2 distinguishes single tenant subscribers, who schedule their own upgrades and receive wider version support, from multitenant subscribers on the automatic upgrade calendar, so both tenancy models are offered. A FedRAMP government community cloud is listed separately. The agreement does not say where model inference runs.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
The company identifies itself as ISO 27001:2022 certified and describes encryption, AWS hosting, role permissions, and restricted production access. Its agreement adds TLS 1.2 or later, internal multifactor authentication, continuous monitoring, security alerts, and backup and recovery measures. On a reasonable written request, the company may provide existing compliance material, certifications, or third-party audit reports instead of a disruptive audit. A current certificate scope, validity period, and directly accessible report are not supplied with these statements. Generic security language and a badge do not establish the scope of a separate SOC 2 examination or an AI-specific assurance program.
Exhibit B of the SaaS Subscription and Services Agreement states that Icertis is ISO 27001, ISO 27017 and ISO 27018 certified, holds SOC 2 Type 1 and Type 2 certifications and complies with ITAR. It manages risk under the ISO 27001 framework, commissions regular third party vulnerability assessments and penetration testing, encrypts data at rest with AES-256 and supports customer managed keys in Azure Key Vault. The agreement names no auditor, coverage period or self serve route to the reports. Icertis links a Trust Center from its site.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
Amazon Bedrock supplies AI and machine learning processing, and Amazon Textract handles OCR and document processing within the AWS subprocessor role. CORA AI uses an array of pretrained language models and a training process involving legal contracts, materials, precedents, and expert feedback. This identifies infrastructure and broad architecture, while leaving the foundation model families, versions, routing rules, and fine-tuning arrangements unnamed. Subprocessors may change as technical or operational needs evolve. The agreement does not commit to advance model change notices or identify which model handles a particular risk review, summary, or obligation extraction. Provider locations likewise do not assign inference to a particular region.
Icertis names Microsoft as a strategic partner and Azure as its platform, and a Microsoft published customer story records Icertis monitoring Azure OpenAI deployments, which places Azure OpenAI in the stack. Its integrations page lists interoperability with OpenAI, Claude (Anthropic), Microsoft Copilot and SAP Joule agents. Neither source says which models power the Copilots, the contract intelligence engine or Vera, or which model serves which task. The agreement and product pages do not say where models run or commit to notifying customers when the model supply chain changes. A List of Standard Sub-Processors, dated June 2023, sits on the foundation page.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Essentials supports up to three users and 50 contracts each month; Professional allows up to ten users and 200 contracts; Enterprise starts above ten users with 500 monthly contracts. Each base subscription requires a quote. The pricing matrix lists Professional AI risk analysis at $40 per user per month, with up to 100 analyses monthly, while Enterprise includes 20 free reviews. Unlimited storage and distinct signature allowances accompany the plans. Reviewers need no additional license. Integrations, customization, migration, and deployment affect implementation scope, but their charges are not stated. The AI add-on figure therefore does not represent the total cost of running the platform.
Icertis publishes no pricing page, rate, unit of charge or tier structure. Every commercial path on its site ends in a demo or contact request, and there is no free trial or self serve entry point. No third party pricing figure is published either.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
The primary audience is corporate legal operations alongside procurement, finance, sales, HR, compliance, and operational teams. Legal workflows include drafting, negotiation, risk review, approval, execution, repository retrieval, and ongoing obligations. Sector offerings include fintech, automotive, manufacturing, healthcare, software, real estate, logistics, and other commercial industries. Templates and guidebooks adapt review to company policies, while repository filters include jurisdiction, expiry, and contract value. Regional offerings span Europe, the Americas, Asia, and the Middle East, but a jurisdiction and language support matrix is unspecified. Litigation research, court filing, and consumer legal representation are not established parts of the contracting service.
Icertis sells to large enterprises, says 30 percent of the Fortune 100 are customers across more than 90 countries and multiple languages, and covers buy side and sell side agreements rather than one direction. The vendor's own research publishes industry breakouts for public sector, healthcare and life sciences, and banking and insurance, among others. Functional coverage spans legal, procurement, sales, finance and HR. Icertis does not say which organization sizes, contract types or practice areas the platform is not built for. Third party reviews say small and most mid market businesses will find it more platform than they need.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
The DPA allows personal data use for providing, maintaining, securing, and improving the services, subject to customer instructions. Contract files, attachments, and related workflow records fall within that processing scope. The improvement right has no explicit model training exclusion, while advertising profiling and unrelated commercial uses are prohibited. This is a contractual permission for improvement, not a statement that customer contracts actually train CORA AI.
Section 5.2 of the SaaS Subscription and Services Agreement licenses Icertis to use Subscriber Data to provide the SaaS. It also lets Icertis use Subscriber Data to maintain, develop and improve the SaaS, including creating industry relevant analysis, provided the data is not shared with third parties and the Subscriber stays anonymous. Subscriber Data is defined to include the output of processing. The clause does not name model training. An Artificial Intelligence Acceptable Use Policy is listed on the foundation page as an addendum to the agreement.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
Personal data remains for as long as needed to operate the service, meet legal obligations, resolve disputes, and enforce agreements. Written requests at termination can trigger return or deletion within a commercially reasonable timeframe. Backup copies persist under unspecified schedules, with legal, security, and audit exceptions. No routine duration is assigned specifically to prompts, generated summaries, or review outputs while the subscription remains active.
Under section 4.5 of the agreement, Icertis returns Subscriber Data on written request in its then current format at no fee. It may destroy the data if no request arrives within five days of termination. Subscriber Data includes the output of processing. The agreement sets no shorter or configurable window for AI prompts and outputs during the term.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Department and user permissions limit visibility into contract status, approvals, obligations, and renewals. The DPA also specifies role permissions, least privilege, and restricted production access. Neither provision explains how CORA AI retrieval enforces a law firm's matter walls or inherits permissions from an external document system. Single tenant deployment separates organizations, but does not by itself establish boundaries between conflicting matters inside one organization.
Exhibit B of the agreement describes the product's own permission model. It sets out strict role based access control, with authorization implemented through the platform's own features, identity provider authentication, and audit logs capturing every user action with date and time. Section 2.4 makes the Subscriber responsible for determining access privileges, and single tenant deployment is available. The agreement does not describe how the Vera agents respect those permissions across a contract portfolio.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The DPA requires prompt notice when a data subject requests access, correction, deletion, or another personal data right. That obligation concerns individuals exercising privacy rights, not subpoenas or government demands for customer contracts. The software terms and privacy provisions do not establish a separate commitment to tell customers before responding to compulsory legal process. Breach notifications are also a different event and do not settle this question.
Section 7.2 of the agreement permits disclosure of confidential information as required by law, regulation or court order. Unless legally prohibited, the receiving party must give the disclosing party prompt written notice before the disclosure and reasonable assistance in limiting it or obtaining a protective order. Confidential information is defined broadly, and Exhibit B states that Subscriber data is treated as confidential. Icertis publishes no transparency report.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Risk review uses customer guidebooks uploaded in Word or PDF, company playbooks, and the contract being analyzed. CORA AI's training description also refers to broad datasets of legal contracts, materials, and precedents. It does not identify a primary law collection, its licensing basis, or an update schedule for individual sources. A company policy guidebook supplies contractual positions, but does not establish the origin or currency of legal authorities.
Icertis identifies no primary law corpus, and the product does not appear to hold one. Retrieval runs against the customer's own contract repository, templates and clause library, so the source material is the customer's own agreements and its provenance is theirs. The product pages and research library name no vendor supplied legal corpus, license basis or update cadence, which reflects a product built on the customer's own contracts.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
CORA AI scans agreements for risky clauses and deviations from a company's guidebook, then presents severity labels and suggested revisions. No case treatment indicator or connection to a named legal citator accompanies that review workflow. Regular legal updates are a general training claim rather than a check on an authority's subsequent history. The human review recommendation concerns critical decisions and does not describe automatic verification that cited law remains valid.
Icertis is a contract lifecycle platform grounded in the customer's own agreements, with no case law research feature, so a citator falls outside its design. Its product pages and research library say nothing about whether authority carries a treatment signal or whether the product tracks subsequent history, and they name no commercial citator license.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Critical, high, medium, and low labels prioritize the contractual significance of a detected issue. They do not measure the model's confidence or describe what happens when an answer lacks support. Mandatory compliance criteria can stop a contract from advancing, but that workflow restriction is separate from an AI refusal to answer. The risk and summary workflows do not specify an unsupported-answer response or a grounding threshold shown to reviewers.
The product pages and research library do not describe what Icertis does when it cannot ground an answer, and mention no explicit no answer path or confidence signal shown to the user. The boundaries the vendor describes are limits a customer sets on what an agent may do. They are a permission concept, not a statement of what the system does when it does not know.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court finding involving Contractzy, CORA AI, or The Legal Capsule appears in the AI Hallucination Cases database as of October 15, 2026. The current name and former brand produced no relevant match across its 2,191 entries. This dated result concerns reported proceedings. It does not establish that generated clauses or legal assertions are accurate, or rule out a proceeding outside that collection.
The AI Hallucination Cases database maintained by Damien Charlotin, which tracks court decisions worldwide involving AI generated hallucinated content and records the AI tool implicated where it is known, records no court order, opinion or disciplinary record naming Icertis. Published 2026 sanctions summaries and secondary sanctions trackers do not name it either. Icertis is a contract lifecycle platform with no case law research feature, so its output is very unlikely to reach a court filing as cited authority.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
The CORA AI introduction encourages customers to involve their legal departments when aligning implementation with regulatory requirements. Product guidance also recommends human review for critical decisions. These directions do not engage with a named bar opinion, client consent standard, or professional competence rule. The intended corporate legal audience and collaboration with nonlawyer departments are clear, while a jurisdiction-specific ethics mapping for use of AI in legal work remains unspecified.
Icertis publishes substantial annual research on AI adoption and trust in contracting, including the State of Contracting reports, and that research surveys practitioner sentiment. Neither the research library nor the blog, the news index or the product pages engages with a named ethics opinion or bar guidance, including ABA Formal Opinion 512 and state bar guidance. None of it addresses the professional responsibility rules that bind the vendor's legal buyers.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
CORA AI is positioned for corporate departments managing their employer's contracts, alongside procurement, sales, finance, and HR. Faster review, metadata extraction, and obligation tracking reduce those teams' own administrative costs. That workflow does not ordinarily create a bill from outside counsel to a client. Subscription charges and AI add-on units price the software, while no client time-entry adjustment or legal fee disclosure feature is described for the core corporate use case.
Icertis frames its material around business outcomes rather than hours, such as growing revenue, controlling costs, reducing risk and ensuring compliance, and it claims faster drafting and more precise execution. Its product pages and research library describe no per matter record of work done with AI for fee purposes and give no guidance on billing, fees or client disclosure. The buyer is a corporate legal, procurement or finance function rather than a firm billing a client by the hour, so the savings are enterprise cost rather than billable time.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
The DPA names AWS, Razorpay, DocuSign, Zoho Sign, emSigner, Digio, OnlyOffice, and Mailgun with locations and purposes. AWS includes Amazon Bedrock for AI processing and Textract for OCR, giving procurement teams a concrete starting point for provider disclosure. Foundation model versions and a client consent package are unspecified. Subprocessors may change with operational needs, without a separate advance-notification period or customer objection process in the listed terms.
Icertis publishes a subprocessor list on its foundation page alongside the agreement, a Data Protection Addendum with standard contractual clauses, EU Data Act terms and an AI Acceptable Use Policy. The list on that page is dated June 2023.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Tracked revisions, version history, contract audit trails, and approval records preserve parts of the drafting and review process. Legal teams can see changes and updates as agreements move through the lifecycle. Those records do not establish a per-contract export identifying the model, retrieved sources, and a human's verification of each AI result. The platform addresses commercial contract execution; a court filing disclosure or certification workflow is not specified.
Vera Composer records template usage, clause selection, and edits, while Vera Redline logs reviewer actions and supplies clause references with explanations. These records preserve parts of contract drafting and human review. A combined export identifying the specific model, all retrieved sources, and human verification of each generated passage is not described. The audit workflow serves commercial contracting and does not establish a court filing certification process.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Good Law Verification
- Refusal and Uncertainty Behavior
- Bar Guidance Alignment
Which one fits
Choose Contractzy if
- The review team wants to supply or generate a risk guidebook and work through its highlighted issues.
- Contract administration combines monthly volume packages with ongoing commitment assignment.
- Deployment within the customer's premises is a meaningful selection requirement.
Choose Icertis if
- Business users need guided conversations to assemble routine NDAs and statements of work.
- Legal wants separate drafting and redlining agents using approved language and rules.
- Review history must retain clause selection, editing, and reviewer decisions for contract audits.
In summary
Contractzy
Contractzy's risk workflow uses a guidebook to check agreements against company requirements. Users inspect highlighted changes and prioritize issues by severity before the contract advances. The AI Legal Index identifies its combination of review, approval, and subsequent obligation ownership as the relevant product finding. Summary and extraction tools support Word, PDF, and scanned agreements. The broader platform also handles signature and storage, with separate package limits and options for deployment on customer premises.
Icertis
Icertis Vera Composer turns a guided conversation into an NDA or statement of work assembled from approved templates, clauses, and business rules. Vera Redline checks incoming language against playbooks and explains proposed corrections. Its retention of clause selections, edits, and reviewer decisions is a control highlighted by the AI Legal Index. Exceptions return to legal judgment, and reviewers use clause references and risk information to evaluate recommendations. These agents sit within Icertis's larger contract intelligence platform.
Questions buyers ask
What does Vera Composer ask a business user to provide?
It collects the details needed for an NDA or statement of work through a guided conversation. It converts those inputs into structured context before assembling a draft under company rules. From the AI Legal Index, based on each vendor's own published materials as of October 15, 2026. No vendor pays for placement.
How do Contractzy guidebooks affect negotiation?
The guidebook sets the positions used during risk review. CORA flags departures, organizes their severity, and highlights changes so users can work through the agreement's issues. From the AI Legal Index, based on each vendor's own published materials as of October 15, 2026. No vendor pays for placement.
Does Vera Redline replace the final legal decision?
No. It handles routine revisions and flags exceptions, while humans retain final judgment on complex negotiations and nuanced clauses. Suggested changes include explanations and clause references. From the AI Legal Index, based on each vendor's own published materials as of October 15, 2026. No vendor pays for placement.
What audit information accompanies Icertis's drafting and review?
Composer tracks templates, clause selection, and edits. Redline records edits and reviewer actions. Those contract records preserve parts of the review history without establishing a complete AI filing certificate. From the AI Legal Index, based on each vendor's own published materials as of October 15, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Icertis's Vera product names distinguish conversational creation from contract review. Contractzy uses CORA across several contract tasks. This page compares those workflows without treating a product's risk indicator as proof of legal correctness.