Ironclad vs Leah: how they compare in 2026

Intake, the no code Workflow Designer, approvals, routing, signature, the repository, analytics and integrations all predate generative AI and work without it. Ironclad sells that workflow layer as its foundation. The models drive central parts of the contract work on top of it. AI Playbooks, with each play tied to a clause, do the redlining. Jurist runs a named family of agents for drafting, editing, review, research, intake and redlining under a Manager Agent, with Conversational Search over the repository. The AI layer sits on an established product rather than one built on AI from the start.

Leah sells AI agents and an orchestration layer that sit on top of a contract lifecycle platform, and that platform works without them. The vendor describes it the other way round. It says other vendors bolted AI onto systems built for manual workflows, while Leah was designed from scratch with orchestration as the foundation. ContractPod Technologies has sold contract lifecycle management since 2012. Leah launched in March 2023 as an AI services hub within that platform, went standalone in May 2023, and Leah Intelligence followed in October 2024. Without the agents, the product is still a working CLM with guided intake, approval routing, DocuSign and Adobe Sign execution and a contract repository. That CLM has its own market and its own Gartner category placement. The orchestration layer on top is model driven.

Ironclad claims precise redlining, advanced AI, and proprietary legal AI models trained on legal terminology with prompts engineered for legal work. AI Playbooks tie each play to a clause. The system proposes varying degrees of revision to match preferred terms with minimal change, so its output follows a standard the customer wrote and a reviewer can check it against that standard. Ironclad publishes no accuracy figure, hallucination rate, test set or evaluation. It does not describe its retrieval method or how output links to a source a user can open. Its AI Addendum says AI output may be incorrect or inaccurate, and Ironclad does not warrant that output will be accurate, complete or error free.

Leah returns to accuracy repeatedly in its materials, and the AI governance page says every action is measured against benchmarks for accuracy, bias and outcome. Neither that page nor the home page publishes a result from that measurement. They give no accuracy figure, no error or hallucination rate, no description of any benchmark or test set and no published evaluation. The product material describes a legal helpdesk that answers contract questions with sources attached, so a user can in principle check an answer against its source. Neither page says what the system does when the customer's own contracts do not support a position.

Human in the loop governance, Ironclad states, ensures every agent works transparently and is auditable and controllable. The vendor says plainly that the customer is in charge. Customers get governed and auditable AI review frameworks they can review, override and continuously govern across teams and contract types. The controls are administrative as well. Playbook permissions let administrators configure which users and groups may view, create and edit playbooks. A Manager Agent routes tasks across the agent family, so the orchestration is visible. The vendor says the agents automate repetitive lower risk work, while strategic negotiation and nuanced risk assessment stay with the lawyer. The AI Addendum makes the customer responsible for reviewing and validating output before using it, and says the AI products are not a substitute for human oversight. Ironclad does not publish the threshold at which an agent stops or escalates.

Leah's dedicated AI governance page sets out a three stage control loop. In the first stage, policy in, the customer defines which agents may act, on which data, within which thresholds and where escalation is required. Those policies are held as configuration rather than code. In the second, execution governed, every agent action runs through those policies in real time. Approvals, escalations and rejections are applied automatically, and the orchestrator enforces guardrails at each step. In the third, audit out, every decision is logged with the rationale, what the agent did, why, under which policy, on what data and to what outcome. The records are described as tamper resistant and immutable. The loop sets the thresholds, the review points and the route back to human judgment. Leah's home page puts the position in one line, that the workflow runs itself while the judgment stays human. The page does not say what happens after an output is found to be wrong. Default modes are not described, because the customer configures the guardrails rather than receiving them preset.

According to Ironclad, Jurist gave legal operations at NEXT Insurance 50 percent of its time back. Customer quotes carry before and after numbers. In one, a first pass redline that took 30 minutes to a couple of hours becomes a solid first draft in minutes. In another, an MNDA review or custom order form clause drafting goes from an hour to a day down to minutes or seconds. Several of the quoted figures do not name the person speaking. Ironclad publishes a customer stories section, though no dated case study that states its method.

Leah publishes qualitative quotes from four named people. Noelle Perkins is EVP and Chief Legal Officer at Cushman and Wakefield, and Lidia Kamleh is Chief Legal Officer at Dubai Future Foundation. Frances Bain-Cumberbatch is Chief Legal and External Affairs Officer at Ansa McAL, and Zillia Knight is Senior Legal Officer at Terumo Europe. Three results are published with the customer unnamed. A major American logistics company cut contract review time by 91 percent. A global manufacturer protected more than $18 million of revenue, and an American retail REIT tracked more than $2 million of savings. About 54 enterprise logos appear, including Philips, MUFG, Sandoz, Pernod Ricard, Alaska Airlines and Wood PLC. PwC and KPMG appear among them. PwC entered a commercial alliance in March 2024, and Epiq resells Leah in its Service Cloud. Integreon is quoted as an early adopter that resells it, and Pinsent Masons adopted it for managed legal services in July 2025. Partners and customers are shown together without distinction, and the Chief Product Officer of Execo, another services partner, is among the testimonials.

Under its AI Addendum, Ironclad trains its own models on Customer Data, Input and Output only if the customer opts in through the AI Training Settings in the admin console. A later opt out stops new training from that date. Before any such use, Ironclad de identifies, anonymizes and aggregates the data, and it commits to measures so that output generated for other customers does not include that customer's data. The addendum separately lets Ironclad use Input and Output to evaluate the performance and accuracy of the service, whether or not the customer opts in. The external LLM providers, listed as AI subprocessors, are barred from training their own models on Customer Data, with zero data retention enabled where available. Section 5 of the Enterprise Services Agreement treats Customer Data as confidential information. Its SOC 2 certification covers the privacy trust category, and it holds ISO 27701 for privacy information management. The published terms do not address attorney client privilege or work product handling, and Ironclad does not document separation between customers, users or matters.

Leah says customer contract data is never used to train models. The AI governance page treats data leaking into models the customer does not own as a failure it engineered out. It says zero data retention is the only acceptable answer, and that Leah enforces zero retention with OpenAI and Anthropic so they process data but never store it. Encryption is AES-256 at rest and TLS in transit, with keys in Azure Key Vault, rotated and reachable only through controlled service accounts. Role based access control is said to apply at every layer, and single tenant deployment is offered for customers with strict isolation needs. Leah sells to Fortune 500 legal departments, and none of this material addresses privilege or work product.

Dedicated pages address legal operations and general counsel alongside procurement and IT. Ironclad describes the platform as serving business teams that touch contracts, with the AI proposing redlines and drafting negotiation ready revisions for those users, so the intended audience is broad by design. Section 2.3 of the AI Addendum states that Ironclad is not a legal advisor to the customer and that using the AI products creates no attorney client relationship. It tells the customer to consult its own counsel on legal, regulatory or compliance matters. A separate AI Disclaimer says AI output does not constitute legal or professional advice, and that a licensed professional should be consulted before anyone acts on it. Neither document addresses competence or supervision duties or sets jurisdiction limits. The human in the loop governance language describes how the system is controlled, which is a different thing from a professional responsibility position.

Leah publishes nothing on the line between a tool and legal advice. Its site carries no disclaimer of any kind and no ethics or professional responsibility page, and it names no bar or ethics guidance, including ABA Formal Opinion 512. The platform is sold to run legal work end to end across legal, procurement and finance teams. In the vendor's own framing, agents carry out commercial work in several steps without routing every decision through a person.

The governance model rests on governed and auditable AI review frameworks and human in the loop governance, which Ironclad says make every agent transparent, auditable and controllable. Customers can review, override and continuously govern agent behavior across teams and contract types. Administrators set permissions for who may view, create and edit the playbooks that drive AI behavior. The vendor presents these as working controls rather than a principles page. A chief technology officer is publicly named as owning the AI roadmap, and Ironclad's security portal lists an AI Security and Governance document available on request. Ironclad publishes no AI management certification such as ISO 42001 and no testing results before release. Its published material names no owner accountable for model governance apart from the technology function, and says nothing about uneven output across matter types, parties or populations.

A dedicated AI governance page names six failure modes the vendor says it engineered out. They include black box decisions that cannot be defended to a regulator or board, and compliance frameworks retrofitted after the fact. Against them the page sets three pillars and a loop of policy, execution and audit. Each action is logged with its rationale and governing policy, in records described as tamper resistant and immutable. The page also says every action is measured against benchmarks for accuracy, bias and outcome, and that accountability is structural rather than aspirational. It names no person or role accountable for model behavior and describes no testing before release. It gives no benchmark method or schedule and discloses no bias measurement result.

Routine audits produce third party SOC 1 and SOC 2 Type II reports certified against security, availability, confidentiality and privacy. Ironclad also holds ISO 27001, 27701, 27017 and 27018, runs a dedicated GDPR program, and has Trusted Cloud Provider status as a Cloud Security Alliance member. Its Data Processing Addendum, version 3.10 effective 5 March 2026, says Ironclad keeps Customer Personal Data only as needed to perform the services. It destroys all copies within 90 days of termination, with a certificate of deletion on request. Section 6(b) commits to notice of a security incident within 48 hours. A subprocessor list at ironcladapp.com/subprocessors names Google Cloud Platform for hosting and Anthropic, OpenAI and Extend as AI providers. The addendum gives 30 days' email notice and an objection right before a new one is added. Ironclad's AI material says zero data retention is enforced at the external model layer, and the AI Addendum commits to enabling it where available. Its data centers run across multiple regions on public cloud providers that the vendor says are themselves certified under SOC 2, ISO 27001 and PCI DSS.

The AI governance page describes TLS in transit and AES-256 at rest. Encryption keys are managed in Azure Key Vault, rotated regularly and reachable only through tightly controlled service accounts. The page also lists multifactor authentication, secure API gateways, network segmentation, real time monitoring and a documented incident response plan. Audit logs are described as comprehensive, tamper resistant and immutable. For outside assurance, the vendor says an independent Managed Security Service Provider audits it every year and that it is penetration tested regularly.

Version 2.2 of the Enterprise Services Agreement, effective 1 July 2026, is published in Ironclad's Legal Center. Section 9.b caps each party's liability at the fees paid in the twelve months before the event giving rise to it. Section 9.d raises the cap to three times that amount for Special Claims. These are breaches of the customer data, information security or confidentiality terms that lead to unauthorized disclosure and misuse of Customer Data, and amounts due under the Data Indemnity. Gross negligence, intentional misconduct and the IP Indemnity are uncapped under section 9.c, and section 9.a excludes consequential loss. Section 8.a gives a defense and indemnity against third party intellectual property claims and against claims arising from unauthorized disclosure of Customer Data caused by Ironclad's breach. Section 6.a warrants that the services materially conform to the agreement and order form and comply with applicable law. Ironclad has 30 days to fix a nonconformity, after which the customer may terminate for a pro rata refund. Exhibit A targets 99.7 percent uptime, with service credits of 1 to 3 percent of the annual fee as the sole remedy. Section 6.b leaves the customer solely responsible for results, including AI output, and neither the agreement nor the AI Addendum indemnifies AI output. The agreement contains no insurance commitment.

Section 16.5 of the Master Terms and Annexes sets a General Cap equal to fees paid or payable in the twelve months before the first incident. An Enhanced Cap of three times that applies to breaches of its security or data protection terms, meaning the security clause and the data processing addendum. Indemnities, intellectual property claims, breach of confidentiality and anything that cannot legally be limited are uncapped. Section 17.1 gives the customer an indemnity against third party intellectual property claims. Section 8.2 warrants that the service will perform materially as documented, with a thirty day fix period under 8.3 and termination with a refund if the fix fails. Annex A publishes uptime tiers of 99.00, 99.5 and 99.9 percent by support plan. A tier missed in three consecutive months, or in four months out of six, allows termination with a refund. Three limits apply. Breaches of confidentiality involving Customer Data fall outside the uncapped claim, so they stay capped and rise to the Enhanced Cap only where the security or data protection terms are also breached. The agreement gives no indemnity for AI output, such as inaccurate output, hallucination or training data provenance. Section 9.2 bars the customer from submitting Sensitive Data, including GDPR Article 9 categories, and the provider disclaims liability for it. These terms are version 3.0c. Version 4.0, dated 4 January 2026, changes only the trading name, according to the vendor.

Ironclad names Salesforce and Coupa specifically, and calls its Salesforce connector the number one Salesforce integration in the market. It has a dedicated integrations page and claims the deepest integrations in the market, treating integration as a primary differentiator. Teams create, manage and collaborate on contracts from inside the systems they already use rather than switching into the CLM. The integrations lean toward enterprise commercial systems rather than legal document management. Ironclad's published integrations include no legal document management connector such as iManage or NetDocuments. It does not document, per integration, what moves in which direction or what an administrator configures.

Leah names its integrations and describes each by function. They cover ERP platforms including SAP and NetSuite, procurement systems including Coupa, financial systems, identity providers including Okta, and existing contract lifecycle tools. DocuSign and Adobe Sign are built in for signing, and a Microsoft Word add in handles redlining. The vendor also describes how the integrations work. It says Leah connects and executes rather than copying data passively, and carries out work across connected systems through the orchestration layer. Leah has a dedicated integrations page, but publishes nothing on what syncs in which direction or what a customer must configure. No document management integration such as iManage or NetDocuments appears, which fits a product built for in house teams rather than law firms.

To meet data residency requirements, Ironclad says it uses multiple data center regions from its cloud providers. Its subprocessor list shows two CLM regions, the United States and an EU datacenter, both hosted on Google Cloud Platform, with Anthropic and OpenAI processing AI requests in the EU for EU hosted customers. Clickwrap runs on Amazon Web Services in the United States. Ironclad does not state a tenancy model or say what changes between plans.

The standard deployment is shared. Single tenant deployment is available for customers with strict isolation requirements. The vendor also offers what it calls a dedicated zero trust private environment in Azure OpenAI Studio, described as fully isolating data from all other customers. Leah runs on Azure, with keys held in Azure Key Vault. On data residency the vendor says only that it supports the residency and regulatory needs typical of large multinational enterprises. It names no region or jurisdiction and describes no customer choice.

SOC 1 and SOC 2 Type II reports come from routine third party audits, and Ironclad names the trust categories certified as security, availability, confidentiality and privacy. Its security portal, run on SafeBase, lists SOC 1, SOC 2, ISO/IEC 27001 with its statement of applicability, 27017, 27018, 27701, CSA STAR, HIPAA, GDPR and CCPA. Reports, a penetration test report, a CAIQ and cyber insurance documentation are available there on request. Ironclad also holds Trusted Cloud Provider status from the Cloud Security Alliance, and says its underlying cloud providers are themselves SOC 2, ISO 27001 and PCI DSS certified. The portal shows no auditing firm, audit coverage period or report date.

The AI governance page claims SOC 1 Type I and II, SOC 2 Type I and II, GDPR compliance, CCPA compliance, HIPAA readiness and ISO 27001 alignment. The home page FAQ, on the same site, says only that Leah is SOC 2 Type II certified, so the two pages disagree on what is held. For ISO 27001 and HIPAA the governance page says aligned and ready rather than certified. The auditor is described only as an independent Managed Security Service Provider, a category rather than a named firm. No coverage period, report date or audit scope is given. Penetration testing is said to be regular, with no partner named and no summary published. Leah has no trust center or portal, so there is no published route to request a report.

Two layers of models sit behind Ironclad's AI. One is proprietary legal AI models that Ironclad built, with prompts engineered for legal work. The other is external LLM providers, which its subprocessor list names as Anthropic and OpenAI, alongside Extend for AI processing and Google Cloud Platform for cloud and AI infrastructure. They run in the United States and, for EU hosted customers, in the EU. The Data Processing Addendum gives 30 days' email notice and an objection right before a new subprocessor is added. The AI Addendum bars AI subprocessors from training on Customer Data and commits to zero data retention with them where available. Ironclad does not say which model or version serves which feature.

The DPA Setup Page lists four model providers against Leah Functionality, each noted as storing or retaining no customer data and each with named jurisdictions. Anthropic PBC is listed for the USA, Japan, and the EU or UK, and OpenAI LLC for the USA, Japan, and the EU or Switzerland. Cohere Inc. is listed for Canada, the USA, the EU or UK, and Japan. Google AI/ML with Google Cloud is listed for the USA, Japan, and the EU, Switzerland or UK. Microsoft Azure Services is listed for hosting and translation, and the private deployment option runs in Azure OpenAI Studio. DPA clause 4.3 requires any new subprocessor to be added to the published list with at least thirty days' notice before it processes customer personal data. Clause 4.4 gives a thirty day objection right on reasonable data protection grounds. If the objection is not resolved, the affected order can be terminated with a refund of prepaid unused fees. No model or version is named for any provider. The platform is described as choosing among several language models for each task and letting customers extend or customize models. Nothing published shows which provider handled a given piece of work.

There is no pricing page on Ironclad's site, and it publishes no rate, unit of charge or tier structure. Every commercial path on the site ends in a demo request, and there is no free trial or self serve entry point. Its AI usage policy, version 1.1, bills overages on AI Credits at Ironclad's then current list price without publishing that price. Third party coverage describes implementation cost as depending on the scope of the CLM deployment rather than on a published rate.

Leah publishes no pricing at any level, including the unit of charge. The primary navigation covers platform, solutions, resources and company, and neither it nor the footer sitemap has a pricing page. There is no tier structure, no unit per seat, contract or agent, no volume banding and no indication of what implementation adds. Every call to action across the site is to request a demo. An implementation FAQ says timelines vary with scope and integrations and that a detailed plan is built during evaluation. It says nothing about cost. No published page gives a view of price before a sales process.

Four buyer personas have their own published positioning, namely legal operations, general counsel, procurement and IT. Ironclad also addresses business teams beyond legal that handle contracts. The stated target is enterprise and global business teams. At least one industry, manufacturing, has dedicated positioning around leakage and contract performance. The practice scope is contracting end to end, from intake to after signature, with no claim to litigation or research capability. Ironclad does not say which organization sizes or contract types the platform is not built for, and publishes no full list of industries or practice areas.

Leah publishes dedicated industry pages for CPG and manufacturing, energy and utilities, financial services, healthcare, and pharma and medical devices. It describes its customers as Fortune 500 enterprises in regulated industries. By function it publishes pages for legal leadership, legal operations, sales and revenue, procurement, and finance. The pages carry distinct propositions written for the General Counsel, the contract operations team, the Chief Procurement Officer and the finance leader. The customer roster spans banking, airlines, pharmaceuticals, consumer goods and engineering. No published page says which practice areas, contract types or matters the platform does not support, and none addresses smaller organizations. Law firms appear only indirectly, through managed service partners, rather than as a served segment.