Docusign Agreement Manager vs Pramata: how they compare in 2026

Docusign Iris extracts data from agreements, including fields the customer defines, builds AI worksheets for portfolio analysis, and runs agents that analyze agreements, follow the customer's policies and work across connected tools. Without the models, the product is still a repository. It stores signed agreements in one searchable place, controls access, keeps an audit trail, tracks renewals and obligations, and reports. Extraction speeds up what would otherwise be manual entry. Docusign sells Agreement Manager as the manage step of its agreement lifecycle and includes it in IAM plans rather than selling it as an AI product. The capability came from the May 2024 Lexion acquisition, and the product was called Docusign Navigator before the rename.

The product is the extraction of structured contract data from portfolios by the Contract AI Engine, validated by AI TrueCheck, with AI Negotiator, agents and a design studio built on it; the vendor positions itself against traditional CLMs precisely as the intelligence layer rather than the repository and workflow. Without the models, a repository of documents remains, without the data the customer is buying.

The AI reads a customer's executed agreements rather than a body of law. Agent answers are described as traceable to cited sources, so a user can follow an extracted term or an answer back to its agreement. The AI Trust page says diverse datasets and checks are used to correct skewed outputs before release, and that harmful outputs are filtered. The subprocessor list names Google's Model Armor as an AI security and content moderation service in the IAM stack. The page also says AI outputs have been tested for accuracy, but no figure, error rate, test set, evaluation or third party validation is published for extraction, agent answers or worksheets. Third party articles cite a 15 percent precision advantage over general purpose models on extraction. Docusign does not publish that figure. Checks on legal authority do not apply, because the product cites the customer's contracts, not law.

The vendor states verifiable data accuracy of 99 percent plus. The TrueCheck release describes how it is measured in production: a key curated by people from a representative set of documents, the AI extraction, and a separate AI validation layer. An accuracy score is shown for each attribute where the three align, and results with lower confidence go to a person. An October 2025 article written by the vendor describes structured output schemas, mandatory reasoning logs step by step and monitoring of the context window as controls against hallucination. The test set behind the headline figure and its date are not published. Grounding to primary law does not apply to a tool that extracts contract data.

The AI Trust page says the customer has the final say to approve outputs. Agents are described as following the customer's policies and returning answers traceable to cited sources. Access controls and built in activity tracking let an administrator see what happened. No line is published between what an agent may do alone and what needs approval. There is no confidence threshold, no rule for when an agent stops or escalates, and nothing on what happens when it is wrong. Docusign markets agents that take action rather than only find data, and that handle delegated tasks across the customer's other tools. It launched an agent layer at its 2026 user conference. The final say statement is a general promise of human review, and no published limit says what a given agent's output may not be used for.

AI TrueCheck runs extraction and validation automatically and shows a high confidence score where the stages agree. It brings in a person where the AI has lower confidence, a stated route for oversight. AI Negotiator presents red, yellow and green risk flags against playbooks for the negotiator to act on, and the design studio lets legal configure playbooks and agents. No numeric threshold is published at which a result is treated as validated without a person, and no route back after a wrong extraction is stated beyond the audit trail.

Four customer stories sit on the product page, each naming the organization, giving figures and quoting a named person by title. Catchafire reports about 77 percent less time processing agreements and double the contracting capacity across sales and legal, quoted by its Deputy Director of Revenue Operations. Greater Philadelphia YMCA reports 99 percent of agreement requests coming through one digital intake process and 50 percent less time on first reviews, quoted by its Senior Vice President of Information Technology. Kindsight reports a sales cycle one week shorter and two to three days saved by IT, quoted by its Director of IT. The Law Offices of Mark T. Hurt, a law firm, is quoted by its Chief of Staff. No story gives a deployment date or the period over which a figure was measured. None says how a figure was measured, or what 77 percent less time is compared against. Each story also has its own page. Docusign reports 1.9 million customers.

The vendor's releases name McKesson, ICE, AbbVie and Callaway Golf as customers of twenty years' standing with no measured outcome, and state ten times faster contract analysis, a two hundred percent adoption rate and a fifty percent reduction in time on contract tasks, unattributed. Nothing joins a named customer to a figure.

The Terms treat data uploaded to the services as the customer's Confidential Information. Docusign must use it only for the purpose provided, disclose it only to people who need it and are bound by equal duties, and protect it with at least reasonable care. If disclosure is compelled by law, Docusign must give prompt written notice first unless the law forbids it, and help obtain a protective order where reasonably available. The subprocessor list names each model provider against the feature it powers: Microsoft Azure OpenAI Service, Azure AI Document Intelligence, Google Gemini, Model Armor and DocuSmart. Encryption in transit and at rest is stated on the AI Trust page. Training on customer data is not excluded, and the Terms present consent to it as something to opt out of. Privilege and work product are not addressed, on a repository that holds signed agreements and, in one published customer story, a law firm's matter workflow. Neither the Terms nor the AI Trust page give a retention or deletion period for AI inputs. The Terms make AI services subject to a separate published AI Attachment for Docusign Services.

The security page says every bit of customer data is treated as highly confidential, that each customer has a dedicated virtual infrastructure with its own database schema and file storage bucket so data is never co-mingled, that only a select group of authorized individuals can reach it, and that data is never stored on servers outside the country. No customer agreement, DPA or trust center is published, the footer's terms govern only the website, and nothing addresses training use, retention, deletion, segregation inside a customer's portfolio, third party model providers or privilege.

IAM is marketed by department, with pages for Sales, Customer Experience, Human Resources, Procurement and Legal. The published customer stories are led by revenue operations and IT, not counsel. For those buyers the AI extracts governing law, indemnities and liability caps, and flags high risk clauses against a company standard. Through agents and AI-Assisted Review, it redlines and reviews contracts. Nothing published says what the product is and is not, or whether its output is legal advice. Nothing says whether a lawyer should review an agent's redline before it goes to a counterparty, or who in the customer is accountable for it. No competence or supervision statement is published, and no jurisdiction limit is named for the AI. The as is warranty disclaimer in the Terms is a liability term. The Legality Guide covers whether electronic signatures are valid by jurisdiction, not AI output. The Terms also bar customers from using outputs to train competing systems.

The product is sold to enterprise legal, procurement and finance teams, and AI Negotiator is positioned as accelerating negotiation for those users. The releases and listing text do not state that outputs are not legal advice, who should rely on them, or how the product supports a supervising lawyer's duties, and no customer agreement appears with them.

Iris has its own AI Innovation Principles and AI Trust pages. The AI Trust page describes four mechanisms. Data is encrypted in transit and at rest. Customers control whether their data is used for AI training, and data used with consent is aggregated and anonymized first. Diverse datasets and checks are used to correct skewed outputs before release, and content filtering screens harmful outputs. A storage and compute platform supports labeling and training, and the page names the NIST AI framework. No person, committee or team is named as accountable for model behavior. No test results are published for the correction of skewed outputs, including whether output differs across agreement types, languages or regions. The page says broader AI Trust capabilities require contacting sales.

The vendor's October 2025 article describes controls against hallucination for which Pramata has a patent pending. They include a Relationship Object Model that constrains outputs to predefined schemas, a requirement that the model document its reasoning step by step, and monitoring that alerts users when the context window may overflow, and the article states fifteen or more such measures. The TrueCheck release adds a validation layer in production with audit trails. No responsible AI framework, ISO 42001 or equivalent, published test results, bias findings or accountable owner appears in the article or the releases.

The subprocessor list is dated 11 August 2026, published as a web page and a download, and split by Docusign service so the IAM section can be read alone. Each entry names the entity, country, the feature it powers and a contact address, and the list covers eighteen Docusign group entities and their locations. Updates go to an RSS feed customers can subscribe to, the Data Protection Attachment commits to that feed, and customers may object to a new subprocessor by email on stated grounds. The Terms promise prompt written notice before compelled disclosure and notice of suspension. The Trust Center has incident reporting, security alert and system status pages, and encryption in transit and at rest is stated for Iris. The Terms, the AI Trust page and the subprocessor list state no retention period or deletion commitment for prompts, extracted provisions or agent outputs. The Terms make AI services subject to a separate AI Attachment for Docusign Services. They also reserve usage data, including insights from operating the services, to Docusign for benchmarking, analytics and product development. Any disclosure of it is deidentified and aggregated.

The security page describes US hosting on Amazon Web Services with disaster recovery, a dedicated virtual infrastructure and isolated database schema for each customer, encryption of user technologies, biometric facility access, employee security screening, certified firewalls with intrusion detection and prevention, a web application firewall, round the clock logging and monitoring, annual third party vulnerability assessments and penetration tests, and quarterly scans. Audit trails on AI outputs are also described. The website privacy policy keeps personal data as long as its purposes require. No retention period, deletion commitment, subprocessor list or practice for notifying incidents is published for customer contracts or AI output, and no customer agreement or DPA is published.

The Terms provide the service as is and as available. All implied warranties are excluded, including merchantability, fitness for purpose, accuracy and title, and there is no promise that the service will be error free. Total liability is capped at the fees paid for the service in the twelve months before the first event, or 100 dollars if greater, and at 100 dollars during a free trial. Direct and consequential damages are both disclaimed. The customer indemnifies Docusign for its use of the service, breach of the Terms and the content of uploaded documents. These Terms carry no vendor indemnity for AI output. The only vendor indemnity in the published terms covers intellectual property, in supplemental terms for Australian consumers and small businesses. Insurance, service levels and who bears the loss when an extraction is wrong or an agent acts on a misread obligation are not addressed. Enterprise customers sign a separate Master Services Agreement, published in archive form.

The releases describe capabilities without any warranty, indemnity, cap or insurance position. The Terms of Services in the site footer govern use of the website only, and no subscription agreement or license for the platform is published.

The App Center lists partner apps, Docusign advertises more than 1,000 prebuilt integrations, and it runs a public Developer Center and lists prebuilt MCP connections as an integration category. The product page names integrations and data sharing as a feature, connecting agreement data to existing tools through integrations, APIs and connectors. Another feature extends agreement data across vetted tools and AI ecosystems while enforcing governance and security controls. Docusign Connect sends webhook events when an envelope changes state. The product page names no practice management, document management or matter management system. It does not say which way data flows for any connection or what a firm must configure.

AI Negotiator runs inside Microsoft Word, analyzing incoming agreements against playbooks and prior negotiations. The platform exposes contract intelligence through Model Context Protocol connectivity and an extension to Anthropic's Claude Cowork legal plugin, described as bringing commercial relationship context into that interface. A partnership with Gotransverse connects contract data to billing, and the design studio is described as connecting to existing systems. Document management and matter system integrations are not named with what syncs in which direction.

Regions are given by supplier and service in the subprocessor list. Azure hosting for IAM runs in the United States, Australia, Canada, the European Union and Japan. Azure AI Services for IAM runs in the United States, Canada, the European Union, Australia and Japan. Google Cloud Vertex AI for IAM runs in those regions plus Switzerland. The list says accounts provisioned in the EU use EU infrastructure subprocessors, and the trust pages say documents are encrypted and stored in the data center region of the sending account. A data residency page exists. Binding Corporate Rules approved by EU data protection authorities, as processor and controller, and the EU Standard Contractual Clauses at Modules 2 and 3 give cross border transfers a contractual basis. No shared or isolated environment, separation model, or single tenant, private or on premises option is described or refused. Nothing says where AI processing runs relative to where documents are stored, even though AI services are provisioned region by region, apart from hosting.

Hosting is in the United States on AWS, according to the security page, with a dedicated virtual infrastructure for each customer, an isolated database schema and cloud file storage bucket, and data that is never stored on servers outside the country. No other region or residency choice is offered, and nothing separates where AI processing runs from where data is stored.

The Docusign Trust Center has sections for Legal, Alerts, Compliance, Privacy, Security and System Status, plus a Trust Portal for certifications and assessments. Standards are listed with versions and years. They include ISO 27001:2022, ISO 27017:2015 and ISO 27018:2019, and PCI DSS 4.0, with Docusign on the Visa Global Registry as a service provider. SOC 1 Type II and SOC 2 Type II audits run annually across production operations, including data centers. Docusign also holds C5 Type II, IRAP at PROTECTED level, DoD IL4 provisional authorization, APEC Privacy Recognition for Processor, Binding Corporate Rules as processor and controller, and Government of Canada Protected B. Scope is stated for each. FedRAMP Agency and GovRAMP authorizations name Docusign Federal covering eSignature and IAM, so Agreement Manager is inside them. C5 covers eSignature only and DoD IL4 covers eSignature and CLM, so Agreement Manager is outside those. The certifications can be checked in public registries without a sales call: the FedRAMP marketplace, the Visa registry, the EU Trusted List via ANSSI, the APEC directory and the CSA STAR registry, where the annual CAIQ is public. Third party risk assessments are done each year under S&P Global KY3P, ProcessUnity and the Shared Assessments SIG.

The security page states that Pramata holds ISAE 3402 SOC 1 Type II and SOC 2 Type II reports and engages a Big Four auditing firm each year to assess its control objectives, with annual third party penetration tests and quarterly scans, and that its controls use ISO 27001 as a reference standard rather than a certification. The product description supplied to directories adds HIPAA and GDPR compliance. The audit firm is not named, no coverage period or report date is given, and no trust center or report route is published.

AI suppliers have their own heading in the subprocessor list dated 11 August 2026, which is split by Docusign service. Each entry is tied to the feature it powers. Microsoft's Azure OpenAI Service runs AI extractions in Agreement Manager, AI agents and AI-Assisted Review for IAM. Azure AI Document Intelligence runs extractions in Agreement Manager and Agreement Desk agents. Google's Gemini on Vertex AI runs extractions in Agreement Manager, Model Armor provides AI security and content moderation, and Gemini global endpoints power AI assisted web form creation. DocuSmart Inc., trading as Lexion and wholly owned by Docusign, runs extractions in Agreement Manager and has its own subprocessor page. Each entry states the countries where it is provisioned and a contact address. Updates go to an RSS feed customers can subscribe to, clause 7.2 of the Data Protection Attachment records that, and customers may object to a new subprocessor on stated grounds. No model version is given for any provider, and nothing says what any provider may retain.

The releases describe a proprietary Contract AI Engine, generative AI extraction with an AI validation layer, and controls on structured output and reasoning logs. The Claude Cowork extension identifies an interface rather than a supplier. No model, provider, inference location or commitment to notify customers of changes is named in the releases or the article.

The Terms set out the commercial mechanics in detail. Plans are sold in entitlement units and renew automatically unless canceled at least five business days before the term ends. Overage is billed monthly in arrears at the plan's per unit rate. Promotional codes apply to the first term only, and renewals are at the full price. Payments are not refundable, though Docusign will consider in good faith a refund request made in the first thirty days of an annual term. Fee changes need thirty days' notice, late payment carries interest at 1.5 percent a month, and taxes are extra. The Terms say plans may be published on the website, and self serve plan and pricing pages exist for eSignature and IAM. Enterprise tiers carry no published price. Agreement Manager is not sold alone. It is included in select IAM plans, and the product page offers Explore IAM Plans next to Contact Sales, so its price depends on which plan carries it.

The releases and site describe an enterprise platform without a unit of charge, plan or figure, and neither the navigation nor the footer links a pricing page; the route offered is a demo request.

Docusign has a page for each buyer department: Legal, Sales, Customer Experience, Human Resources and Procurement, plus IAM Core and enterprise pages. It has industry pages for financial services, insurance, real estate, government, healthcare and life sciences. FedRAMP and GovRAMP authorizations name IAM for government, 21 CFR Part 11 with an annual independent USDM assessment supports life sciences, and HIPAA support is stated. Docusign reports 1.9 million customers. For legal buyers it publishes material on agentic contract workflows for in house legal teams, and a law firm is among its named customer stories. Nothing says which agreement types or practice areas the extraction handles well or poorly. Some extraction paths are documented elsewhere as English first, but the product pages do not say so. No minimum customer size or excluded segment is named. Legal is one of five buyer groups here, not the only buyer.

The buyer is enterprise legal, procurement, finance and operations teams at large companies, with Fortune 500 users named in the Claude Cowork release and customers across healthcare, financial exchanges, pharmaceuticals and consumer goods. Coverage spans the contract lifecycle from repository through negotiation to obligation management, with a named agent for tariff risk. No contract type, jurisdiction or company size is named as unsupported, and no law firm use is described.