Ironclad vs Icertis: how they compare in 2026
Two enterprise contract lifecycle platforms of similar age and ambition, and both publish their customer agreements. Icertis's SaaS Subscription and Services Agreement carries an intellectual property indemnity, a liability cap of a year of fees and named insurance cover. A hosting exhibit lets the subscriber choose the data center. Ironclad's Enterprise Services Agreement caps liability at a year of fees, triples the cap for data breaches and adds a data indemnity, and it hosts in the US or the EU. Ironclad makes training opt in by contract and names Anthropic, OpenAI and Extend as AI providers. Icertis may use customer data to improve its service, provided the customer stays anonymous, and does not say which models power its own AI features. Both publish integration pages, Icertis with adapters for SAP, Microsoft, Salesforce and Workday, and Ironclad with Salesforce and Coupa at the center. Ironclad also publishes a named customer result with a figure. Neither publishes an accuracy measurement.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
Intake, the no code Workflow Designer, approvals, signature, the repository and analytics run without AI, and Ironclad sells that system of record as the base of the platform. Ironclad AI sits on top of it. Ironclad Agent takes a plain language request and returns the answer, the contract or the workflow, or hands the task to a specialized agent. Contract Review Agent redlines third party paper against playbooks and precedent, Intake Agent pulls terms into launch forms, Renewal Agent briefs upcoming renewals, and Analytics Agent charts contracting data. The agents act on live workflow state, such as where a contract sits in approval, as well as on documents. The contract platform predates generative AI and would still work without the models.
Icertis offers Icertis Copilots, a contract intelligence engine that extracts clauses, obligations and risk, and Vera, an agent layer released across Engage, Operate and Analyze in 2026. The vendor says Vera acts autonomously within boundaries the customer sets. These sit on a contract platform for authoring, negotiation, approval, execution, obligation management and analytics, which runs without the models and was sold as Icertis Contract Management before the AI positioning. The rename to Contract Intelligence added an AI layer to that platform rather than rebuilding it.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Ironclad's AI Systems team published how its extraction is grounded in May 2026. The model returns each value with a description of where it sits in the contract. A second pass ties that value to the exact OCR tokens, so the interface highlights the passage with its page and position. If the model returns no match, the system tries the raw text and then the normalized value before giving up on a location. Contract Review Agent bases redlines on the customer's playbooks, templates and precedent agreements, and redlines can show their rationale. Answers through the MCP connectors link back to the contract in Ironclad. No accuracy figure, error rate or test set is published, and the AI Addendum says output may be incorrect or inaccurate.
Icertis describes a contract intelligence engine that extracts clauses, obligations and risk and turns them into queryable data, and an intelligence layer across the enterprise that it says understands business and industry context. It publishes no accuracy figure, hallucination rate, test set or evaluation, and does not describe how an output links back to a source the user can open. One Gartner Peer Insights reviewer says their organization has not been impressed with the Discovery tool AI.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Ironclad Agent routes each request to the right agent or workflow, and the agents work inside existing contracting workflows under the user's permissions. Contract Review Agent proposes redlines, flags risk and applies positions in Ironclad or directly in Microsoft Word, with the final decision left to the reviewer. Playbooks set preferred positions and fallbacks, and answers through the MCP connectors are limited to contracts the user can already open. The AI Addendum makes the customer responsible for reviewing and validating output before using it, and says the AI products are no substitute for human oversight. Ironclad does not publish when an agent stops or hands work back, or a limit on what an agent may complete without a person.
Icertis says its agents act autonomously within boundaries the customer sets, so the customer can move fast and safely, and describes the platform as human first alongside AI native. In that design the agents act on their own and the customer defines where they stop. The vendor's own research reports that 44 percent of contracting leaders lack sufficient trust in AI's autonomous capabilities. Its product pages do not say how a boundary is configured or what an agent does when it reaches one. Nor do they say what review screen a person gets, or what the vendor commits to when an output is wrong.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Named customers report figures. NEXT Insurance says Contract Review Agent gave legal operations half its time back, and AES reports first pass redlines that took 30 minutes to two hours now reach a first draft in minutes. Signifyd puts an MNDA review or custom order form clause at minutes rather than an hour to a day, and Hormel's senior counsel reports turnaround cut from 12 weeks to 3. A Forrester study drawn from five customer organizations puts the three year return at 314 percent. Apart from that study, the figures come from the customers themselves, undated and with no method stated.
Icertis publishes customer quotes that identify the customer by industry and revenue band rather than by name. Among them are an IT services company with more than $30 billion in annual revenue and a healthcare and biotech company with more than $1 billion. It says 30 percent of the Fortune 100 are customers, across more than 90 countries and millions of contracts. Gartner named Icertis a Customers' Choice in the 2025 Peer Insights Voice of the Customer report for CLM, with 93 percent of customers recommending the platform across 84 ratings. No published case study pairs a named customer with measured results.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Ironclad's AI Addendum lets it train its own models on customer data, input and output only after a customer enables AI Training Settings in the admin console. An opt out stops new training from that date. That data is first de identified, anonymized and aggregated, and output for other customers may not contain it. Whether or not a customer opts in, Ironclad may use input and output to evaluate the performance and accuracy of the service. External model providers may not train on customer data and run under zero data retention where available. The Enterprise Services Agreement treats customer data as confidential information, and SOC 2 covers the privacy category. The terms say nothing about attorney client privilege or work product, and Ironclad documents access by role rather than separation between matters.
The SaaS Subscription and Services Agreement sets out role based access control, identity provider authentication, audit logs of every user action, encryption at rest and in transit, and a single tenant option. Section 4.5 returns Subscriber Data on request and permits destruction if it is not requested within five days of termination. Section 5.2 lets Icertis use Subscriber Data, including output, to maintain, develop and improve the service, provided the data is not shared with third parties and the Subscriber stays anonymous. The agreement does not address attorney client privilege or work product, or say how the Vera agents respect user permissions. A 2017 company news item describes storage on GDPR compliant cloud infrastructure with encryption at rest and in transit. Icertis also links a Trust Center from its site.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Ironclad markets its AI to legal teams and to sales, procurement and operations users, and describes the platform as built for everyone, lawyers or not. Its AI Addendum states that Ironclad is not the customer's legal advisor, that using the AI products creates no attorney client relationship, and that the customer should consult its own counsel. A separate AI Disclaimer says output is not legal advice and should be verified with a licensed professional before anyone acts on it. Neither document addresses competence or supervision duties, or which jurisdictions the product suits.
Icertis sells the platform across legal, procurement, sales, finance and HR, where it handles NDAs, service agreements and HR paperwork alongside commercial contracts. Its AI drafts, redlines and negotiates for all of those users. The product pages, company section and research library take no position on where a tool ends and legal advice begins, and say nothing about competence or supervision duties. They set no jurisdiction limits, although Icertis operates in more than 90 countries. The human first framing describes how the product is designed rather than a position on professional responsibility.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Ironclad says every AI feature passes through its Evaluation Framework, which measures accuracy, consistency and reliability against curated benchmarks and real contract data. Subject matter experts validate model output during development and after release, with feedback loops meant to catch bias early, and training data is chosen to cover varied contract types and jurisdictions. Dimitry Dukhovny, the chief information security officer, leads security, compliance and AI governance. Customers can review, override and keep governing agent behavior across teams and contract types. No evaluation results are published, and nothing is disclosed about where output quality differs by contract type, jurisdiction or party.
Icertis calls itself AI native and human first, says its agents operate within boundaries the customer sets, and publishes annual research on buyer concerns about AI. That research reports that 55 percent of contracting leaders cite data output quality as a significant concern and 44 percent lack sufficient trust in autonomous AI. The product pages and research library describe no AI governance framework, no AI management certification such as ISO 42001, no named owner of model governance and no testing before release. They say nothing about uneven output across matter types, parties or populations.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Ironclad's Data Processing Addendum, version 3.10 from 5 March 2026, limits storage of customer personal data to what the services need. It destroys all copies, archives included, within 90 days of the agreement ending, returns data within 30 days on request and issues a deletion certificate within 30 days. A security incident is reported to the customer within 48 hours of Ironclad becoming aware of it. The subprocessor list names each provider, its activity and its location for the United States platform, the EU datacenter and Clickwrap. A new subprocessor comes with 30 days' email notice and a right to object. External model providers run under zero data retention and may not train on customer data. Data is encrypted with TLS 1.2 or higher in transit and AES 256 at rest, with per tenant keys and bring or hold your own key options, and access follows administrator set roles.
Section 4.5 of the agreement returns Subscriber Data on request at no fee and permits destruction if it is not requested within five days of termination. Exhibit B sets out strict role based access, identity provider authentication with multifactor support, audit logs of all user actions, encryption at rest and in transit, Azure network security groups and threat monitoring. It also commits Icertis to notify the Subscriber of any breach resulting in loss or unauthorized disclosure of Subscriber Data, under a documented incident process. Section 6.1 bars sale of personal data and its combination with other sources, while section 5.2 permits use of Subscriber Data to develop and improve the SaaS. A List of Standard Sub-Processors, in a version dated June 2023, is published on the foundation page.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
Version 2.2 of the Enterprise Services Agreement, in force since 1 July 2026, is published in Ironclad's legal center. Ironclad defends and indemnifies customers against third party claims that the platform infringes intellectual property, and against claims from unauthorized disclosure of customer data caused by its breach of the data and security terms. It warrants that the services materially conform to the agreement and comply with applicable law; if a nonconformity is not fixed within 30 days, the customer may terminate for a pro rata refund. Liability is capped at the fees paid in the prior twelve months, rising to three times that amount for data and confidentiality breaches and the data indemnity. Gross negligence, intentional misconduct and the intellectual property indemnity sit outside the cap, and consequential loss is excluded. The service level schedule targets 99.7 percent uptime, with service credits as the remedy. The customer bears sole responsibility for results from AI output, which Ironclad does not warrant as accurate, and the agreement carries no insurance commitment.
Section 9.1 of the agreement gives a defense and indemnity for third party intellectual property claims, for claims by Icertis subcontractors or personnel, and for gross negligence causing injury or property damage. It states an exclusion for Subscriber Data. Section 10.1 excludes consequential loss, and section 10.2 caps each party at the amounts Icertis received in the preceding twelve months. Section 8.2 warrants noninfringement, professional performance and material conformity to the documentation, with a correction remedy and a termination right. Section 10.4 commits Icertis to carry commercial general liability cover of $1 million per occurrence and $2 million in aggregate. It adds technology errors and omissions cover including cyber liability of $5 million, umbrella cover of $5 million and employer's liability. The cover comes from a carrier rated A minus, runs for the term and one year after, and a certificate is available on request. The agreement gives AI output no separate warranty. An AI Acceptable Use Policy sits on the foundation page as an addendum to the agreement.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Ironclad offers native integrations, iPaaS connections to more than 8,000 applications, and a documented public API, with Tray, Zapier and MuleSoft in its directory. The directory names Salesforce, which is AppExchange approved, Coupa, SAP, NetSuite, Zip and Ramp, Microsoft Word and Teams, Slack, DocuSign and Adobe Acrobat Sign, and Box, Google Drive, OneDrive, Dropbox and Egnyte. MCP connectors answer questions about contracts and workflow status in Claude, ChatGPT and Slackbot, scoped to the user's permissions and linked back to Ironclad. Ironclad publishes no connector to iManage or NetDocuments, and its directory entries do not say what data moves or in which direction.
Icertis publishes a Native Integrations page with prebuilt adapters for SAP, Microsoft, Salesforce, Workday, Adobe Sign and DocuSign, each described by what it moves. The SAP Ariba adapter syncs procurement contracts, line items and suppliers, and the SAP S/4HANA adapter brings buy side supplier master data into the platform. For ERP and finance, adapters for Microsoft Dynamics 365 Finance and Operations and for Workday Financials sync procurement contracts, suppliers and financial data. The Salesforce CRM and CPQ adapter creates contracts from accounts, opportunities and quotes, with two way sync of deal and pricing data, and a Dynamics 365 Sales adapter keeps contract and sales data in step. The Adobe Sign and DocuSign adapters return signed agreements and audit trails to the platform. Microsoft Teams, Microsoft 365 for the web and Outlook connections cover collaboration, and SAM.gov and federal clause adapters serve public sector work. Licensed public APIs and connections to OpenAI, Claude, Microsoft Copilot and SAP Joule agents round out the list. The page does not describe setup or what an administrator configures, and it names no document management or identity connector. The platform runs on Microsoft Azure, with Microsoft as a strategic partner, and its named competitors include SAP Ariba and DocuSign CLM.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Ironclad runs as a cloud service on Google Cloud Platform, in multiple zones in the United States, with a separate EU datacenter. For EU hosted customers the subprocessor list places Anthropic and OpenAI, along with Elastic Cloud, Datadog and the product database, in the EU, so AI processing stays in that region too. Clickwrap runs separately on Amazon Web Services in the United States. Customers can bring or hold their own encryption keys. Ironclad does not describe a tenancy model or what changes between plans.
Exhibit B of the SaaS Subscription and Services Agreement states that the platform is hosted on Microsoft Azure and that the Subscriber may select the Azure data center at the outset of the subscription. Production backups sit on geo replicated Azure storage. Exhibit A-2 distinguishes single tenant subscribers, who schedule their own upgrades and receive wider version support, from multitenant subscribers on the automatic upgrade calendar, so both tenancy models are offered. A FedRAMP government community cloud is listed separately. The agreement does not say where model inference runs.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
Ironclad holds SOC 1 and SOC 2 Type II reports from routine third party audits covering security, availability, confidentiality and privacy, along with ISO 27001, 27701, 27017 and 27018. It runs a GDPR program with standard contractual clauses, complies with HIPAA and holds Cloud Security Alliance Trusted Cloud Provider status, with a public CAIQ on the alliance's site. Penetration tests run each year and vulnerability tests each quarter, and disaster recovery is tested twice a year. Certification documents are requested through a security portal, and the website gives no auditor, audit period or report date.
Exhibit B of the SaaS Subscription and Services Agreement states that Icertis is ISO 27001, ISO 27017 and ISO 27018 certified, holds SOC 2 Type 1 and Type 2 certifications and complies with ITAR. It manages risk under the ISO 27001 framework, commissions regular third party vulnerability assessments and penetration testing, encrypts data at rest with AES-256 and supports customer managed keys in Azure Key Vault. The agreement names no auditor, coverage period or self serve route to the reports. Icertis links a Trust Center from its site.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
Contract Review Agent uses models from Google Gemini, OpenAI and Anthropic, chosen for quality, latency and performance, and Ironclad says it evaluates and swaps in models as they change. Its own models, which learn from aggregated, anonymized data of customers who opt in, sit alongside them. The subprocessor list names Anthropic, OpenAI and Extend for AI and Google Cloud Platform for cloud and AI infrastructure, each in the United States or the EU. A new subprocessor brings 30 days' email notice and a right to object, and AI subprocessors run under zero data retention where available and may not train on customer data. Ironclad does not say which model serves which agent, and a change of model within an existing provider triggers no notice.
Icertis names Microsoft as a strategic partner and Azure as its platform, and a Microsoft published customer story records Icertis monitoring Azure OpenAI deployments, which places Azure OpenAI in the stack. Its integrations page lists interoperability with OpenAI, Claude (Anthropic), Microsoft Copilot and SAP Joule agents. Neither source says which models power the Copilots, the contract intelligence engine or Vera, or which model serves which task. The agreement and product pages do not say where models run or commit to notifying customers when the model supply chain changes. A List of Standard Sub-Processors, dated June 2023, sits on the foundation page.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Ironclad prices by custom quote and publishes no figure. Its pricing page sets out the structure. A customer picks one or more of the CLM, AI assistant and eSignature products, and a deployment led by its own team, Ironclad's legal engineers or a partner. Add ons cover the API and integrations, extra instances and success plans. Security costs nothing extra, some integrations are included and others are paid add ons, and the academy, community and in app guides are free. Its fair use policy for AI sells agent use as AI Credits set in the order form and bills overage at the then current list price. Fair use of the embedded AI features is judged against seat count. Contract Review Agent comes within Ironclad CLM, with a seven day trial arranged through sales.
Icertis publishes no pricing page, rate, unit of charge or tier structure. Every commercial path on its site ends in a demo or contact request, and there is no free trial or self serve entry point. No third party pricing figure is published either.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Ironclad sells to enterprise and growing companies, with dedicated pages for general counsel, legal operations, procurement, sales and IT. It describes the platform as handling every contract type, from legal and sales to finance, HR, marketing and procurement, from intake through renewal. Named customers include Mastercard, L'Oreal, Cisco, Docker, Gusto and Rippling. The product covers contracting only, with no litigation or legal research function. Ironclad does not say which organization sizes or contract types it does not serve.
Icertis sells to large enterprises, says 30 percent of the Fortune 100 are customers across more than 90 countries and multiple languages, and covers buy side and sell side agreements rather than one direction. The vendor's own research publishes industry breakouts for public sector, healthcare and life sciences, and banking and insurance, among others. Functional coverage spans legal, procurement, sales, finance and HR. Icertis does not say which organization sizes, contract types or practice areas the platform is not built for. Third party reviews say small and most mid market businesses will find it more platform than they need.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
Section 1.1 of the AI Addendum, version 2.1 from 20 April 2026, lets Ironclad train its own models on customer data, input and output once the customer turns on AI Training Settings. The data is de identified, anonymized and aggregated first, an opt out stops new training but not training already under way, and external model providers may never train on it. Ironclad's product FAQ says the default setting depends on the customer's agreement and data location.
Section 5.2 of the SaaS Subscription and Services Agreement licenses Icertis to use Subscriber Data to provide the SaaS. It also lets Icertis use Subscriber Data to maintain, develop and improve the SaaS, including creating industry relevant analysis, provided the data is not shared with third parties and the Subscriber stays anonymous. Subscriber Data is defined to include the output of processing. The clause does not name model training. An Artificial Intelligence Acceptable Use Policy is listed on the foundation page as an addendum to the agreement.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
During the term, the Data Processing Addendum keeps customer personal data only as long as the services need it, and the AI Addendum sets no separate period for prompts and output. All copies are destroyed within 90 days after the agreement ends, with a 28 day window to export the repository. External model providers run under zero data retention.
Under section 4.5 of the agreement, Icertis returns Subscriber Data on written request in its then current format at no fee. It may destroy the data if no request arrives within five days of termination. Subscriber Data includes the output of processing. The agreement sets no shorter or configurable window for AI prompts and outputs during the term.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Ironclad keeps its own role based permissions, set by administrators, rather than inheriting them from a document system. Agents and MCP answers respect the same permissions, so a user sees only the contracts already open to them. Nothing describes walls between matters, since the product is built for in house teams rather than firms.
Exhibit B of the agreement describes the product's own permission model. It sets out strict role based access control, with authorization implemented through the platform's own features, identity provider authentication, and audit logs capturing every user action with date and time. Section 2.4 makes the Subscriber responsible for determining access privileges, and single tenant deployment is available. The agreement does not describe how the Vera agents respect those permissions across a contract portfolio.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The Data Processing Addendum commits Ironclad to tell the customer promptly of any government or law enforcement request for its personal data, unless the law forbids it, and to help the customer contest it. The Enterprise Services Agreement allows disclosure of confidential information under a court or government order after reasonable notice where the law permits. Ironclad publishes no transparency report.
Section 7.2 of the agreement permits disclosure of confidential information as required by law, regulation or court order. Unless legally prohibited, the receiving party must give the disclosing party prompt written notice before the disclosure and reasonable assistance in limiting it or obtaining a protective order. Confidential information is defined broadly, and Exhibit B states that Subscriber data is treated as confidential. Icertis publishes no transparency report.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Ironclad's AI works over the customer's own contracts, playbooks and workflow data rather than a body of law. Its own models learn from aggregated, anonymized patterns across customers who opt in, and Ironclad cites more than 2 billion contracts processed. No source, scale, license or refresh cycle is given for that training data.
Icertis identifies no primary law corpus, and the product does not appear to hold one. Retrieval runs against the customer's own contract repository, templates and clause library, so the source material is the customer's own agreements and its provenance is theirs. The product pages and research library name no vendor supplied legal corpus, license basis or update cadence, which reflects a product built on the customer's own contracts.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
Ironclad works on contracts and has no case law research function, so its output rarely cites authority. No citator, treatment signal or check of later history is described.
Icertis is a contract lifecycle platform grounded in the customer's own agreements, with no case law research feature, so a citator falls outside its design. Its product pages and research library say nothing about whether authority carries a treatment signal or whether the product tracks subsequent history, and they name no commercial citator license.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Contract Review Agent flags missing clauses and departures from a company's standards, and extraction highlights the passage each value came from. When the model cannot place a value, the grounding system retries on the raw and normalized text rather than returning nothing. No path for declining to answer, and no confidence signal for the user, is described.
The product pages and research library do not describe what Icertis does when it cannot ground an answer, and mention no explicit no answer path or confidence signal shown to the user. The boundaries the vendor describes are limits a customer sets on what an agent may do. They are a permission concept, not a statement of what the system does when it does not know.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
Ironclad has no entry in the AI Hallucination Cases database, Damien Charlotin's record of court decisions involving hallucinated AI content. Ironclad is a contracting platform, and its output is seldom filed with a court as cited authority.
The AI Hallucination Cases database maintained by Damien Charlotin, which tracks court decisions worldwide involving AI generated hallucinated content and records the AI tool implicated where it is known, records no court order, opinion or disciplinary record naming Icertis. Published 2026 sanctions summaries and secondary sanctions trackers do not name it either. Icertis is a contract lifecycle platform with no case law research feature, so its output is very unlikely to reach a court filing as cited authority.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Ironclad's AI Addendum and AI Disclaimer say output is not legal advice and should be verified with a licensed professional. No ethics opinion or bar guidance is named, ABA Formal Opinion 512 included.
Icertis publishes substantial annual research on AI adoption and trust in contracting, including the State of Contracting reports, and that research surveys practitioner sentiment. Neither the research library nor the blog, the news index or the product pages engages with a named ethics opinion or bar guidance, including ABA Formal Opinion 512 and state bar guidance. None of it addresses the professional responsibility rules that bind the vendor's legal buyers.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
Ironclad's savings claims come from named customers: NEXT Insurance recovering half of legal operations time, and AES and Signifyd cutting first redlines and NDA reviews to minutes. Its buyers are in house teams that do not bill clients by the hour, and nothing records AI assisted work for fee purposes.
Icertis frames its material around business outcomes rather than hours, such as growing revenue, controlling costs, reducing risk and ensuring compliance, and it claims faster drafting and more precise execution. Its product pages and research library describe no per matter record of work done with AI for fee purposes and give no guidance on billing, fees or client disclosure. The buyer is a corporate legal, procurement or finance function rather than a firm billing a client by the hour, so the savings are enterprise cost rather than billable time.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
Ironclad's subprocessor list names Anthropic, OpenAI and Extend for AI and Google Cloud Platform for cloud and AI infrastructure, with locations for the United States platform and the EU datacenter. The Enterprise Services Agreement, Data Processing Addendum and AI Addendum are public in its legal center. A new subprocessor brings 30 days' email notice and a right to object. No notice pack written for a client's outside counsel guidelines is published.
Icertis publishes a subprocessor list on its foundation page alongside the agreement, a Data Protection Addendum with standard contractual clauses, EU Data Act terms and an AI Acceptable Use Policy. The list on that page is dated June 2023.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Ironclad's workflows record routing, assignment and approvals for each contract, and AI review is described as auditable, with humans able to review and override it. Extracted values highlight their source passage and redlines can show their rationale. No export records which model produced an output or who verified it. Ironclad's output is contract work rather than court filings.
Icertis tracks obligations and approvals per contract, and third party reviews refer to standardized workflows and access controls, so a workflow trail plausibly exists. The product pages and research library describe no export that covers the model used, the sources retrieved and human verification together. Icertis names no model behind its features, so such a record could not state the model used. It is a contracting platform rather than a litigation product, so a judicial AI disclosure order is unlikely to reach its output.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Primary Law Corpus Provenance
- Good Law Verification
- Refusal and Uncertainty Behavior
- Bar Guidance Alignment
Which one fits
Choose Ironclad if
- You want training kept off unless you choose it. Ironclad's AI Addendum lets it train its own models only for customers who opt in, on anonymized and aggregated data, and bars its AI subprocessors from training on customer data.
- Salesforce is where your contracts start. Ironclad names it specifically and claims the leading Salesforce integration in the market, with Coupa alongside and a dedicated integrations page.
- You want a deployment result you can check. Ironclad publishes NEXT Insurance as giving legal operations 50 percent of its time back, alongside attributed before and after figures from named users.
Choose Icertis if
- You want hosting you choose. Icertis lets the subscriber select its Azure data center when the subscription starts, offers single tenant and multitenant hosting, and lists a FedRAMP government cloud.
- Your contracting runs in both directions at global scale. Icertis explicitly spans buy side and sell side agreements across 90 plus countries and multiple languages, with published industry research covering public sector, healthcare and life sciences.
- You run on Microsoft and SAP. Icertis runs on Azure with Microsoft as a strategic partner, and its integrations page lists adapters for SAP Ariba, SAP S/4HANA, Dynamics 365, Teams and Outlook.
In summary
Ironclad
Ironclad is an enterprise contract lifecycle management platform covering intake, contract creation, no code workflow automation, approvals, negotiation, signature, repository and analytics. It is sold to in house legal, legal operations, procurement, sales and IT. According to the AI Legal Index, Ironclad is direct about its own data practice. It publishes strict do not train and zero data retention policies with external model providers, and separately states that any customer data used to train Ironclad's own models is anonymized and aggregated before use. Integrations are named and treated as a differentiator, particularly Salesforce and Coupa. It publishes NEXT Insurance as a named customer giving legal operations 50 percent of its time back. Its Enterprise Services Agreement, Data Processing Addendum and AI Addendum sit in a public Legal Center.
Icertis
Icertis operates Icertis Contract Intelligence, an enterprise contract lifecycle platform. It covers authoring, negotiation, approval, execution, obligation management, risk and compliance, and analytics across buy side and sell side agreements. According to the AI Legal Index, its published SaaS Subscription and Services Agreement states what the vendor stands behind. Section 9.1 gives a defense and indemnity for third party intellectual property claims, and section 10.2 caps each party at the amounts received in the preceding twelve months. Section 10.4 commits the vendor to named insurance cover, including technology errors and omissions cover of $5 million from an A minus rated carrier. Exhibit B states Microsoft Azure hosting, with the data center selectable by the subscriber at the outset of the subscription, and both single tenant and multi tenant models are offered. Its integrations page lists prebuilt adapters for SAP, Microsoft, Salesforce and Workday systems. No accuracy measurement or hallucination rate is published.
Questions buyers ask
Ironclad vs Icertis: which is the better contract lifecycle platform?
The two lead on different ground, and both publish their customer agreements. Ironclad makes training opt in by contract, names its AI providers and publishes a named customer result with a figure. Icertis adds named insurance cover and a data center the subscriber selects, and lists adapters across SAP, Microsoft, Salesforce and Workday. Neither publishes an accuracy measurement for its AI. From the AI Legal Index, based on each vendor's own published materials as of October 8, 2026. No vendor pays for placement.
Does Ironclad train its AI on customer contracts?
Only where the customer opts in. Ironclad's AI Addendum lets it train its own models on customer data only after the customer enables AI Training Settings, and the data is anonymized and aggregated first. Output generated for other customers must not include that customer's data, and its AI subprocessors may not train on customer data. From the AI Legal Index, based on each vendor's own published materials as of October 8, 2026. No vendor pays for placement.
What does Icertis publish about data security?
Its main statement is contractual. Exhibit B of its published SaaS Subscription and Services Agreement states Microsoft Azure hosting, with the data center selected by the subscriber at the outset of the subscription. Both single tenant and multi tenant models are offered. It publishes no accuracy measurement or hallucination rate for the AI layer. From the AI Legal Index, based on each vendor's own published materials as of October 8, 2026. No vendor pays for placement.
Which one integrates better with existing systems?
Both publish integration pages. Icertis lists prebuilt adapters for SAP Ariba, SAP S/4HANA, Microsoft Dynamics 365, Workday, Salesforce, Adobe Sign and DocuSign, each described by what it moves. Ironclad names Salesforce and Coupa, claims the leading Salesforce integration in the market, and publishes a dedicated integrations page. Neither describes what an administrator configures. From the AI Legal Index, based on each vendor's own published materials as of October 8, 2026. No vendor pays for placement.
What do Icertis and Ironclad both leave unpublished?
Neither publishes a rate, a unit of charge or a tier structure, and on both properties every commercial path ends in a demo or contact request. Icertis takes no position on where its tool ends and legal advice begins, while Ironclad's AI Disclaimer says its output is not legal advice. From the AI Legal Index, based on each vendor's own published materials as of October 8, 2026. No vendor pays for placement.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Ironclad's training of its own models is opt in under its AI Addendum, on anonymized and aggregated data. The addendum also lets it use prompts and outputs to evaluate its service without an opt in. Icertis's agreement lets it use customer data to maintain, develop and improve the service, provided the customer stays anonymous and nothing is shared with third parties. Icertis also publishes an AI Acceptable Use Policy as an addendum and links a Trust Center from its site. Neither vendor reviewed this page.