Ironclad vs netLex: how they compare in 2026

I
Ironclad profile
N
netLex profile
Last verifiedOctober 16, 2026

Ironclad fits a legal operations team seeking a conversational entry point to contracts, specialized agents and established connections to tools such as Claude, ChatGPT and Slackbot. netLex focuses on company agreements and legal requests, with OpenAI clause revision, playbook review and CRM driven template generation. The timing of external AI access is significant. Ironclad describes working MCP connectors, while netLex announced an MCP connection for the third quarter without a separate release confirmation in the material reviewed. On that availability question, AI Legal Index distinguishes a described connector from a dated announcement. Data control also differs: Ironclad trains its own models only using customers who opt in, while netLex states that AI inputs do not train the model. netLex may suit regional business operations and multilingual service; Ironclad may suit teams that want contract agents available through their existing assistant tools.

At a glance

Category
IroncladContract Review & Drafting
netLexContract Review & Drafting
Founded
Ironclad2014
netLex2014
Headquarters
IroncladSan Francisco, California, United States
netLexBelo Horizonte, Brazil
Last verified
IroncladOct 14, 2026
netLexOct 16, 2026

All 15 axes, side by side

The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.

AI Centrality

How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.

Ironclad
BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a document or workflow system.

Intake, the no code Workflow Designer, approvals, signature, the repository and analytics run without AI, and Ironclad sells that system of record as the base of the platform. Ironclad AI sits on top of it. Ironclad Agent takes a plain language request and returns the answer, the contract or the workflow, or hands the task to a specialized agent. Contract Review Agent redlines third party paper against playbooks and, in early access, precedent, Intake Agent pulls terms into launch forms, Renewal Agent briefs upcoming renewals, and Analytics Agent charts contracting data. The agents act on live workflow state, such as where a contract sits in approval, as well as on documents. The contract platform predates generative AI and would still work without the models.

netLex
BB on AI CentralityThe models are the engine of a core capability, layered on a product that would still function without them as a document or workflow system.

netLex combines a contract lifecycle platform with AI for clause drafting, review, extraction and questions about agreements. Its OpenAI integration lets users simplify, translate or revise clauses with prepared or custom prompts. Review Agent compares incoming contracts with the customer's playbook, while Creation Agent turns an existing document into questionnaire fields and variables. Management Agent extracts dates, parties, amounts and obligations for portfolio monitoring. Those capabilities sit within a wider system of templates, approvals, negotiation, signatures and storage that can operate without generation. The June 2026 agent announcement also describes an early access program; creating templates from a description alone was still forthcoming.

Citation Accuracy and Hallucination Disclosure

Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.

Ironclad
BB on Citation Accuracy and Hallucination DisclosureGrounding is real and documented, with linked primary sources and a described retrieval method, short of published accuracy figures an outsider can test.

Ironclad's extraction uses two passes to connect values to source text. The model returns each value with a description of where it sits in the contract. A second pass ties that value to the exact OCR tokens, so the interface highlights the passage with its page and position. If the model returns no match, the system tries the raw text and then the normalized value before giving up on a location. Contract Review Agent bases redlines on the customer's playbooks and templates, with precedent based redlining in early access, and redlines can show their rationale. Answers through the MCP connectors link back to the contract in Ironclad. No accuracy figure, error rate or test set is available, and the AI Addendum says output may be incorrect or inaccurate.

netLex
CC on Citation Accuracy and Hallucination DisclosureAccuracy is asserted without measurement, or grounding is claimed while output cites sources the reader cannot open and verify.

Review Agent compares clauses with a company playbook and explains departures from its standards. netLex also describes questions about contracts and attachments, including inconsistencies between the main agreement and a commercial appendix. These are useful sources of context, but the product materials do not demonstrate an openable citation for each answer or a method for validating cited legal authorities. No reproducible accuracy test, sample size or breakdown of missed risks is published. The terms explicitly warn that AI responses may be inaccurate, incomplete or unsuitable. A reviewer therefore has to compare proposed changes with the agreement and applicable law before relying on them.

Autonomy and Oversight Model

What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.

Ironclad
BB on Autonomy and Oversight ModelA written commitment that the models work alongside a supervising lawyer, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.

Ironclad Agent routes each request to the right agent or workflow, and the agents work inside existing contracting workflows under the user's permissions. Contract Review Agent proposes redlines, flags risk and applies positions in Ironclad or directly in Microsoft Word, with the final decision left to the reviewer. Playbooks set preferred positions and fallbacks, and answers through the MCP connectors are limited to contracts the user can already open. The AI Addendum makes the customer responsible for reviewing and validating output before using it, and says the AI products are no substitute for human oversight. Agent stop conditions, handback routes and limits on work completed without a person are not specified.

netLex
BB on Autonomy and Oversight ModelA written commitment that the models work alongside a supervising lawyer, with real review surfaces, short of the full control structure: commonly the threshold at which the system stops or what happens after it is wrong.

Administrators must enable the OpenAI functionality before users can access it, and customer policies govern its use. A reviewer can accept, edit or reject suggested wording, with the final contract remaining under human control. netLex describes additional approval steps for important negotiation changes and a Review Agent configured against the customer's clause rules and acceptable limits. Its July 2026 explanation distinguishes automated actions from human decisions in the history. The precise uncertainty level that stops an agent, mandatory escalation triggers and the procedure for undoing an erroneous downstream action are not published. The terms require users to assess AI results before adopting them.

Operational and Outcome Evidence

Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.

Ironclad
BB on Operational and Outcome EvidenceReal deployment evidence with substance, short of full attribution or measurement: a named customer without figures, or figures without the named customer.

Named customers report figures. NEXT Insurance says Contract Review Agent gave legal operations half its time back, and AES reports first pass redlines that took 30 minutes to two hours now reach a first draft in minutes. Signifyd puts an MNDA review or custom order form clause at minutes rather than an hour to a day, and Hormel's senior counsel reports turnaround cut from 12 weeks to 3. A Forrester study drawn from five customer organizations puts the three year return at 314 percent. Apart from that study, the figures come from the customers themselves, undated and with no method stated.

netLex
BB on Operational and Outcome EvidenceReal deployment evidence with substance, short of full attribution or measurement: a named customer without figures, or figures without the named customer.

Gupy provides a named example of deployment with operational figures. In netLex's September 2026 account, Gupy simplified its commercial amendment language, introduced defined approval responsibilities and connected Salesforce before measuring changes in the first months. Average amendment completion fell from 38 to 25 days, while legal response time fell from 1.58 to 0.31 day. Amendments signed without customer changes increased from 16% to 60%. The account attributes the improvements to a combined process and integration project, not an isolated AI intervention. Exact observation dates, document counts and an independently reviewed measurement protocol are absent, limiting comparisons with other organizations.

Privilege and Confidentiality Posture

How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.

Ironclad
BB on Privilege and Confidentiality PostureSubstantive published commitments on confidentiality and training use, short of the full picture: commonly silence on segregation between users or matters, or on what the underlying model provider may retain.

Ironclad's AI Addendum lets it train its own models on customer data, input and output only after a customer enables AI Training Settings in the admin console. An opt out stops new training from that date. That data is first de identified, anonymized and aggregated, and output for other customers may not contain it. Whether or not a customer opts in, Ironclad may use input and output to evaluate the performance and accuracy of the service. External model providers may not train on customer data and run under zero data retention where available. The Enterprise Services Agreement treats customer data as confidential information, and SOC 2 covers the privacy category. The terms say nothing about attorney client privilege or work product, and access follows roles without specified matter boundaries.

netLex
BB on Privilege and Confidentiality PostureSubstantive published commitments on confidentiality and training use, short of the full picture: commonly silence on segregation between users or matters, or on what the underlying model provider may retain.

The privacy policy states that inputs supplied to netLex AI will not train the model, and the product description says drafting and review data are not retained by the AI service. Access controls use roles, corporate authentication and customer permissions. netLex describes agents as unable to reach information beyond the current user's access, with a separate customer environment. Contract storage nevertheless has its own lifecycle: deleted user records can leave name and email history, and backups remain for five years. The public terms do not directly promise preservation of attorney privilege or explain how model provider access affects work product protection.

UPL and Professional Responsibility Posture

Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.

Ironclad
CC on UPL and Professional Responsibility PostureA boilerplate disclaimer sits in the terms while the marketing describes the product in advice terms, or the intended audience is left ambiguous.

Ironclad markets its AI to legal teams and to sales, procurement and operations users, and describes the platform as built for everyone, lawyers or not. Its AI Addendum states that Ironclad is not the customer's legal advisor, that using the AI products creates no attorney client relationship, and that the customer should consult its own counsel. A separate AI Disclaimer says output is not legal advice and should be verified with a licensed professional before anyone acts on it. Neither document addresses competence or supervision duties, or which jurisdictions the product suits.

netLex
BB on UPL and Professional Responsibility PostureA real position is published on advice versus tooling, short of full treatment: commonly a disclaimer without the supervision and competence dimension, or silence on jurisdiction limits.

netLex is aimed at legal departments and the business teams working with them on company agreements. Its terms require users to assess the relevance, accuracy and suitability of AI results before adopting them for any purpose. They also state that AI cannot replace necessary human, legal, technical or professional analysis. The drafting interface supports this division by leaving acceptance or rejection of suggestions with the user. However, jurisdictional limits on automated legal opinions and a detailed account of lawyers' competence or supervision duties are not supplied. Corporate staff can initiate contracts and requests without being lawyers, making the configured approval route significant.

AI Governance and Bias Disclosure

Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.

Ironclad
BB on AI Governance and Bias DisclosureA published governance framework with real substance, short of testing results or a named owner.

Ironclad says every AI feature passes through its Evaluation Framework, which measures accuracy, consistency and reliability against curated benchmarks and real contract data. Subject matter experts validate model output during development and after release, with feedback loops meant to catch bias early, and training data is chosen to cover varied contract types and jurisdictions. Dimitry Dukhovny, the chief information security officer, leads security, compliance and AI governance. Customers can review, override and keep governing agent behavior across teams and contract types. Evaluation results and performance differences by contract type, jurisdiction or party are not available.

netLex
CC on AI Governance and Bias DisclosureResponsible AI principles are published without a mechanism, a testing regime, or anything a buyer could audit.

netLex publishes principles for AI use in contracts: company playbooks, access permissions, traceable decisions and final human approval. It describes logs that distinguish automated decisions from human actions and presents these controls as part of its own design. That establishes an AI governance position, but not a full account of how the vendor tests its models. No named owner for model risk, release evaluation protocol, bias assessment across languages or results across contract types are supplied. The Information Security and Compliance Committee oversees security and privacy; its existence alone does not show accountability for uneven legal output or model behavior.

AI Safety and Data Stewardship

Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.

Ironclad
AA on AI Safety and Data StewardshipRetention, deletion, access control, subprocessors and incident practice are all published, current, and specific enough to hold the vendor to.

Ironclad's Data Processing Addendum, version 3.10 from 5 March 2026, limits storage of customer personal data to what the services need. It destroys all copies, archives included, within 90 days of the agreement ending, returns data within 30 days on request and issues a deletion certificate within 30 days. A security incident is reported to the customer within 48 hours of Ironclad becoming aware of it. The subprocessor list names each provider, its activity and its location for the United States platform, the EU datacenter and Clickwrap. A new subprocessor comes with 30 days' email notice and a right to object. External model providers run under zero data retention and may not train on customer data. Data is encrypted with TLS 1.2 or higher in transit and AES 256 at rest, with per tenant keys and bring or hold your own key options, and access follows administrator set roles.

netLex
BB on AI Safety and Data StewardshipSubstantive published policy covering most of the ground, short of the full set: commonly no named subprocessor list or no stated incident practice.

The privacy policy separates user data, customer agreements and AI inputs, and names the purposes for processing them. Users' personal data are deleted when their account or the customer contract ends, with limited identity history retained and backups kept for five years. Customers direct deletion of third party personal data in agreements. At termination, extraction is through REST APIs returning base64 content, so the customer needs its own conversion and storage capability. Published safeguards include encryption, role permissions, annual external penetration testing and an incident response team. A deadline for notifying customers of a breach and precise AI service retention exceptions are not supplied.

AI Liability and Recourse

What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.

Ironclad
AA on AI Liability and RecourseWhat the vendor stands behind when its output is wrong is published and specific: indemnity scope, caps, carve outs, and any insurance or warranty a buyer can actually invoke.

The Enterprise Services Agreement, version 2.2 effective July 2026, governs warranties and financial remedies. Ironclad defends and indemnifies customers against third party claims that the platform infringes intellectual property, and against claims from unauthorized disclosure of customer data caused by its breach of the data and security terms. It warrants that the services materially conform to the agreement and comply with applicable law; if a nonconformity is not fixed within 30 days, the customer may terminate for a pro rata refund. Liability is capped at the fees paid in the prior twelve months, rising to three times that amount for data and confidentiality breaches and the data indemnity. Gross negligence, intentional misconduct and the intellectual property indemnity sit outside the cap, and consequential loss is excluded. The service level schedule targets 99.7 percent uptime, with service credits as the remedy. The customer bears sole responsibility for results from AI output, which Ironclad does not warrant as accurate, and the agreement carries no insurance commitment.

netLex
CC on AI Liability and RecourseLiability is addressed only through a standard limitation clause that disclaims the exposure the product creates.

The August 2025 terms place responsibility for AI results on the user and disclaim accuracy, completeness and suitability. They expressly exclude netLex's liability for decisions, actions and omissions arising from use of AI functionality. Separate provisions also disclaim losses from errors in generated agreements and third party service failures. If netLex is nevertheless held liable, the stated ceiling is the amount the customer paid for the platform during the preceding twelve months. No published AI output indemnity, professional liability insurance commitment or compensation mechanism for a harmful clause is provided. A negotiated software license may contain additional provisions unavailable in these public user terms.

Practice Systems Integration Depth

How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.

Ironclad
BB on Practice Systems Integration DepthReal integrations exist and are documented, short of depth: named connections without a description of what they actually move.

Ironclad offers native integrations, iPaaS connections to more than 8,000 applications, and an API, with Tray, Zapier and MuleSoft in its directory. The directory names Salesforce, which is AppExchange approved, Coupa, SAP, NetSuite, Zip and Ramp, Microsoft Word and Teams, Slack, DocuSign and Adobe Acrobat Sign, and Box, Google Drive, OneDrive, Dropbox and Egnyte. MCP connectors answer questions about contracts and workflow status in Claude, ChatGPT and Slackbot, scoped to the user's permissions and linked back to Ironclad. No iManage or NetDocuments connector is identified, and the directory does not specify individual field mappings or sync directions.

netLex
AA on Practice Systems Integration DepthDocumented, verifiable integrations into the systems legal work already lives in, with the depth described: what syncs, in which direction, and what a firm must configure.

Salesforce and HubSpot integrations map CRM properties to variables in netLex contract templates. Customer identity, commercial amounts, payment terms, dates and opportunity stage can feed the agreement; the configured stage triggers generation. Contract creation history and the information used remain visible inside the CRM. Legal teams prepare the approved templates and the customer configures the field mapping and trigger. Gupy describes using this process for commercial amendments. netLex also supplies Slack notifications, directory authentication, signature connections and a REST API, with netLex Connect supporting custom input and output flows. Its announced MCP interface still lacks a separate public release confirmation.

Deployment Model and Data Residency

Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.

Ironclad
BB on Deployment Model and Data ResidencyDeployment model is stated clearly with partial residency detail, or residency is offered without the processing location being addressed, or the tenancy model is stated on its own with no residency detail published.

Ironclad runs as a cloud service on Google Cloud Platform, in multiple zones in the United States, with a separate EU datacenter. For EU hosted customers the subprocessor list places Anthropic and OpenAI, along with Elastic Cloud, Datadog and the product database, in the EU, so AI processing stays in that region too. Clickwrap runs separately on Amazon Web Services in the United States. Customers can bring or hold their own encryption keys. Ironclad does not describe a tenancy model or what changes between plans.

netLex
BB on Deployment Model and Data ResidencyDeployment model is stated clearly with partial residency detail, or residency is offered without the processing location being addressed, or the tenancy model is stated on its own with no residency detail published.

netLex runs on AWS and lets customers choose storage in the United States, Europe or South America. The privacy policy identifies the United States, Ireland and Brazil as contractual locations for storage or processing. It separately permits subcontracting and sharing with providers in other countries, including the United States. A selected repository region therefore does not establish that every AI request stays there. Backups are geographically distributed, without a separate public map of their locations. The native AI integration is with OpenAI, but its processing geography is not tied to each customer region. No customer hosted deployment option is described.

Security Certifications and Trust Center

Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.

Ironclad
BB on Security Certifications and Trust CenterCertification is real and stated, short of accessible evidence: a named standard without scope, date, or a way to obtain the report.

Ironclad holds SOC 1 and SOC 2 Type II reports from routine third party audits covering security, availability, confidentiality and privacy, along with ISO 27001, 27701, 27017 and 27018. It runs a GDPR program with standard contractual clauses, complies with HIPAA and holds Cloud Security Alliance Trusted Cloud Provider status, with a public CAIQ on the alliance's site. Penetration tests run each year and vulnerability tests each quarter, and disaster recovery is tested twice a year. Certification documents are requested through a security portal, and the website gives no auditor, audit period or report date.

netLex
BB on Security Certifications and Trust CenterCertification is real and stated, short of accessible evidence: a named standard without scope, date, or a way to obtain the report.

netLex states that it holds ISO 27001:2022 certification and obtains SOC 2 Type I and Type II reports through recurring audits. The reports are available by request under a nondisclosure agreement. The public security description also specifies annual external penetration testing, static code analysis, component vulnerability analysis and separation of development, test and production environments. Production data are excluded from development and testing. These are more specific assurances than an infrastructure badge alone. However, the public text does not identify the SOC auditor, report observation period or exceptions. AWS's separate certifications should not be treated as independent coverage of every netLex AI function.

Model Supply Chain Disclosure

Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.

Ironclad
BB on Model Supply Chain DisclosureThe supply chain is partly disclosed: providers named without change notification, or architecture described without the providers.

Contract Review Agent uses models from Google Gemini, OpenAI and Anthropic, chosen for quality, latency and performance, and Ironclad says it evaluates and swaps in models as they change. Its own models, which learn from aggregated, anonymized data of customers who opt in, sit alongside them. The subprocessor list names Anthropic, OpenAI and Extend for AI and Google Cloud Platform for cloud and AI infrastructure, each in the United States or the EU. A new subprocessor brings 30 days' email notice and a right to object, and AI subprocessors run under zero data retention where available and may not train on customer data. Ironclad does not say which model serves which agent, and a change of model within an existing provider triggers no notice.

netLex
BB on Model Supply Chain DisclosureThe supply chain is partly disclosed: providers named without change notification, or architecture described without the providers.

OpenAI is identified as the provider behind netLex's native AI drafting and revision features. The privacy policy explains that the integration uses the OpenAI API, and the published supplier list also names OpenAI API and ChatGPT alongside AWS and other service providers. It does not identify a current model version for each agent or specify how those agents route tasks among models. Nor does it map OpenAI processing to the customer's selected storage region. Customers receive notice of privacy policy changes, but a distinct commitment to advance notice of model substitutions is absent. Newer agent features therefore need more detailed supply chain terms.

Commercial Transparency

Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.

Ironclad
BB on Commercial TransparencyReal pricing is published for part of the range, with enterprise tiers withheld, or the unit and structure are stated without the figure.

The base CLM, AI assistant and eSignature products use a custom quote, with deployment led by the customer, Ironclad's legal engineers or a partner. API connections, integrations, extra instances and support plans can add charges. Eligible agents consume a shared pool of AI Credits, with additional use billed at $1 per unit unless administrators enable a cap or buy prepaid packs. Not every AI feature uses those credits, and existing Contract Review Agent seat arrangements continue through the current contract term. Playbook creation and optimization require Professional Services; precedent redlining and Playbook Agent are in early access. A starting platform rate and fixed implementation fee are not specified.

netLex
BB on Commercial TransparencyReal pricing is published for part of the range, with enterprise tiers withheld, or the unit and structure are stated without the figure.

The monthly subscription normally depends on the number of users and their access profiles. It includes implementation and automation of an agreed number of documents; additional document automation is priced according to project complexity. Native integrations, including electronic signature connections, are included, while integrations needing special configuration receive a separate project price. This explains the charging structure without publishing a per user rate, minimum contract value or an AI consumption allowance. A quote must distinguish ordinary platform access from any agent entitlement or usage charge. Public materials do not settle renewal increases, termination charges or the total cost of a large migration.

Firm and Practice Coverage

Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.

Ironclad
BB on Firm and Practice CoverageSegment and practice coverage is described with substance, short of the boundaries: what is supported is clear, what is not is left open.

Ironclad sells to enterprise and growing companies, with dedicated pages for general counsel, legal operations, procurement, sales and IT. It describes the platform as handling every contract type, from legal and sales to finance, HR, marketing and procurement, from intake through renewal. Named customers include Mastercard, L'Oreal, Cisco, Docker, Gusto and Rippling. The platform centers on contracting, while Contract Review Agent also supports legal questions with embedded citations. Ironclad does not say which organization sizes or contract types it does not serve.

netLex
BB on Firm and Practice CoverageSegment and practice coverage is described with substance, short of the boundaries: what is supported is clear, what is not is left open.

netLex serves company legal, sales, procurement, finance and operations teams through contracts, powers of attorney, legal requests and related corporate records. Named customers include Ambev, Blip and Isaac, with Gupy illustrating commercial amendments generated from a CRM. Its templates and playbooks can cover supply agreements, employment contracts, confidentiality agreements and services contracts. The interface is offered in eleven languages and service is available in Portuguese, English and Spanish. Use in more than sixty countries describes geographic adoption, not verified legal coverage in each jurisdiction. The product does not publish an exhaustive set of supported laws, exclusions or a separate law firm matter management offering.

The 12 legal signals, side by side

Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.

Client Data in Training

Can material a lawyer puts into this product be used to train a model?

Ironclad
Opt in

Section 1.1 of the AI Addendum, version 2.1 from 20 April 2026, lets Ironclad train its own models on customer data, input and output once the customer turns on AI Training Settings. The data is de identified, anonymized and aggregated first, an opt out stops new training but not training already under way, and external model providers may never train on it. Ironclad's product FAQ says the default setting depends on the customer's agreement and data location.

netLex
Never, in policy only

netLex's privacy policy expressly says that data supplied to its AI functionality will not train the model. It identifies the OpenAI API as the integration used for drafting and reviewing clauses. This is a published policy promise, rather than a separately supplied negotiated AI agreement. The prohibition concerns AI inputs; it does not erase ordinary contract storage, user history or the five year backup period. The policy does not provide model specific audit results or an enforcement mechanism against every underlying provider.

Prompt and Output Retention

How long does the product keep what a lawyer typed, and can that be set to zero?

Ironclad
Disclosed without a period

During the term, the Data Processing Addendum keeps customer personal data only as long as the services need it, and the AI Addendum sets no separate period for prompts and output. All copies are destroyed within 90 days after the agreement ends, with a 28 day window to export the repository. External model providers run under zero data retention.

netLex
Disclosed fixed window

The AI product description says drafting and review data will not be stored, while the general privacy policy retains platform records under a separate schedule. User deletion or contract termination removes user personal data, subject to limited name and email history; backups persist for five years. Customers can request removal of third party personal data from agreements. These provisions distinguish transient AI processing from saved contract content, but do not enumerate provider abuse monitoring exceptions or a separate schedule for agent conversation histories.

Ethical Walls and Matter Segregation

Does retrieval respect the firm’s ethical walls, or can the model read across them?

Ironclad
Own model, documented

Ironclad keeps its own role based permissions, set by administrators, rather than inheriting them from a document system. Agents and MCP answers respect the same permissions, so a user sees only the contracts already open to them. Nothing describes walls between matters, since the product is built for in house teams rather than firms.

netLex
Own model, documented

netLex describes AI permissions tied to the current user's profile and says agents cannot access data beyond what that person can see. It also describes a separate customer environment, with role permissions and corporate authentication supporting access control. This is a product permission model for corporate contracts, rather than inheritance of a law firm's document management system permissions. The materials do not describe adverse party conflicts, lateral hire screening or an administratively tested ethical wall between separate legal client matters.

Third Party Request and Subpoena Notice

If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?

Ironclad
Notice committed

The Data Processing Addendum commits Ironclad to tell the customer promptly of any government or law enforcement request for its personal data, unless the law forbids it, and to help the customer contest it. The Enterprise Services Agreement allows disclosure of confidential information under a court or government order after reasonable notice where the law permits. No transparency report is available.

netLex
Disclosure addressed, notice absent

The privacy policy permits disclosure in situations required by law or judicial decisions. It does not promise advance customer notification of a subpoena, an opportunity to contest the demand or a regular transparency report. A separate notification provision concerns a data subject asking netLex to delete information: the customer is notified so it can instruct the processor. That deletion procedure should not be read as notice of government access. The user terms also allow netLex to report suspected unlawful activity to authorities.

Primary Law Corpus Provenance

Where does the law in this product come from, and does the vendor have the right to use it?

Ironclad
Sources named, basis unstated

Ironclad's AI works over the customer's own contracts, playbooks and workflow data rather than a body of law. Its own models learn from aggregated, anonymized patterns across customers who opt in, and Ironclad cites more than 2 billion contracts processed. No source, scale, license or refresh cycle is given for that training data.

netLex
Not addressed

The AI features work with customer contracts, attachments, clause playbooks and internal policies. They are not accompanied by an identified collection of licensed case law, statutes or commentary. OpenAI is named as a model provider, but the provider name does not establish the legal sources or licenses behind any generated proposition. Questions about company policy and departures from approved contract wording can have a useful internal reference base. They do not carry a published promise of comprehensive, current legal authority for a jurisdiction.

Good Law Verification

Does the product tell you when the authority it just cited has been overruled?

Ironclad
Not addressed

Ironclad centers on contracts, while Contract Review Agent can also answer legal questions with embedded citations. No citator, treatment signal or check of later history is described.

netLex
Not addressed

netLex's clause review compares agreements with customer standards and can suggest revised wording. No citator integration, case treatment service or automatic validation of whether a cited decision remains good law is described. Its requirement that users assess AI accuracy before adoption is a general review obligation, not a documented legal authority validation workflow. A team using generated legal opinions would still need an external research source to assess authority, subsequent treatment and relevance to the law governing the contract.

Refusal and Uncertainty Behavior

What does the product do when the answer is not in the corpus?

Ironclad
Not addressed

Contract Review Agent flags missing clauses and departures from a company's standards, and extraction highlights the passage each value came from. When the model cannot place a value, the grounding system retries on the raw and normalized text rather than returning nothing. No path for declining to answer, and no confidence signal for the user, is described.

netLex
Not addressed

Review Agent flags departures from a configured playbook and explains their severity, while Intake Agent is described as routing complex requests to appropriate people. Neither description specifies when a model declines to answer because support is missing, how uncertainty is communicated or what happens when contract clauses conflict with its assumptions. The terms warn that results can be inaccurate and require human assessment.

They do not supply an abstention policy, confidence calibration or examples of a refusal when legal context is insufficient.

Fabricated Citation Record

Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?

Ironclad
None located

Ironclad has no entry in the AI Hallucination Cases database, Damien Charlotin's record of court decisions involving hallucinated AI content. Ironclad is a contracting platform, and its output is seldom filed with a court as cited authority.

netLex
None located

The Charlotin collection contained 2,191 cases at this review, with no whole word match for netLex in either the tool field or the full case material. That result is limited to reported incidents included in the collection and does not measure the product's error rate. netLex primarily supports company agreements and internal legal requests, and its terms explicitly acknowledge that AI results may be inaccurate. A lack of a named reported incident does not make a generated legal citation reliable.

Bar Guidance Alignment

Has the vendor engaged in public with the ethics opinions its buyers are bound by?

Ironclad
Not addressed

Ironclad's AI Addendum and AI Disclaimer say output is not legal advice and should be verified with a licensed professional. No ethics opinion or bar guidance is named, ABA Formal Opinion 512 included.

netLex
Not addressed

The terms require users to evaluate AI output and preserve necessary human legal analysis. netLex also discusses privacy, access permissions and final approval by a legal team. It does not map these arrangements to a named bar association opinion, professional conduct rule or jurisdiction specific guidance on legal AI. Compliance with the LGPD and GDPR concerns data protection and does not establish professional responsibility alignment.

Lawyers remain responsible for applying the conduct rules that govern their practice and the particular use of generated work.

Billing and Fee Posture

Does the vendor address what happens to the bill when the work takes an hour instead of six?

Ironclad
Outside the fee relationship

Named corporate customers describe shorter contract reviews and less legal operations work. NEXT Insurance reports recovering half of its legal operations time, while AES and Signifyd describe first redlines and NDA reviews in minutes. The platform serves internal legal, procurement, sales and operations teams handling their organization's agreements. It does not provide a law firm billing workflow or a client fee disclosure process for the time saved.

netLex
Outside the fee relationship

netLex is sold for a company's own contracting and internal legal operations. The published savings concern productivity, amendment cycle time and business process costs, with subscription charges generally tied to users and their access profiles. Those claims do not describe lawyers charging external clients for time saved by AI. No legal fee allocation, client technology surcharge or invoice narrative is offered. Gupy's measured legal response time is an operational service level within a business, rather than a disclosure of billable legal time.

Outside Counsel Guideline Readiness

Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?

Ironclad
Subprocessors listed

Ironclad's subprocessor list names Anthropic, OpenAI and Extend for AI and Google Cloud Platform for cloud and AI infrastructure, with locations for the United States platform and the EU datacenter. The Enterprise Services Agreement, Data Processing Addendum and AI Addendum are public in its legal center. A new subprocessor brings 30 days' email notice and a right to object. No notice pack for a client's outside counsel guidelines is available.

netLex
Subprocessors listed

A published supplier list identifies AWS, OpenAI, Microsoft, Google, Zendesk, signature services and other providers. The privacy policy explains AI input treatment, international transfers, deletion and the five year backup exception. Security reports can be requested under a nondisclosure agreement. These materials give a corporate team information to supply when a client asks about its technology, but do not constitute a named outside counsel approval workflow. The supplier list does not assign locations or detailed processing functions to every listed company.

Court Disclosure Support

If a judge’s standing order requires an AI disclosure, can the product produce one?

Ironclad
Partial record

Ironclad's workflows record routing, assignment and approvals for each contract, and AI review is described as auditable, with humans able to review and override it. Extracted values highlight their source passage and redlines can show their rationale. No export records which model produced an output or who verified it. Ironclad's output is contract work rather than court filings.

netLex
Partial record

netLex describes version history, approval tracking and AI interaction logs that distinguish automated actions from human decisions. Its privacy policy provides a REST API route for exporting stored agreements and data when a customer contract ends. The public description does not specify an export joining each prompt, model version, response and lawyer review into a court disclosure record. Contract negotiation history can support internal reconstruction of a drafting decision, but it is not a published filing certificate or a complete account of AI assistance for a court.

What neither one publishes

The questions both sides leave open

Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.

Signals neither addresses in public material
  • Good Law Verification
  • Refusal and Uncertainty Behavior
  • Bar Guidance Alignment

Which one fits

Choose Ironclad if

  • Contract answers need to be available through Claude, ChatGPT or Slackbot.
  • Reviewers want Ironclad and Word surfaces for a playbook based review agent.
  • An explicit opt in for the vendor's own model training matches procurement policy.

Choose netLex if

  • Portuguese, English and Spanish service matches the team.
  • The main integration requirement is generating contracts from Salesforce or HubSpot.
  • Powers of attorney and legal requests belong in the same operational platform.

In summary

Ironclad

Ironclad Agent connects portfolio questions to specialized agents for review, intake, renewals and workflow design. Contract Review Agent works in Ironclad and Word, with precedent based redlining still identified as early access.

Source: AI Legal Index, 2026

netLex

netLex combines business workflows with AI clause suggestions and agents for templates, review and management. Its existing CRM integration is more concretely described than its announced connection to external AI assistants.

Source: AI Legal Index, 2026

Questions buyers ask

Is netLex's MCP connection confirmed as available?

The June 2026 announcement targets the third quarter, but no separate release confirmation accompanies the materials used here. Its standard OpenAI feature and CRM connections have their own product descriptions. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.

Does Ironclad train on every customer's agreements?

Ironclad describes training its own models only with customer opt in. That permission is distinct from using outside model providers to process a request. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.

Which netLex AI controls are explicit?

An administrator enables the feature, and reviewers decide whether to retain suggested language. Important negotiation changes can open additional approval stages, with playbook rules shaping review. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.

What separates the assistant integrations in an Ironclad versus netLex choice?

For teams buying external assistant access now, AI Legal Index identifies Ironclad's described MCP connectors and netLex's still unconfirmed release announcement. Availability should be demonstrated in the proposed customer environment.

Disclosure

Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.

Ironclad labels precedent based redlining as early access. netLex also offers a FrontRunners program, so the order should distinguish enabled features from previews.

Contact

Correct a record, or ask how something was graded

Every grade and every signal on this index is drawn from public sources and dated. If a record is wrong, out of date, or missing an artifact the index did not locate, send the source and it will be reviewed and the record redated. Vendors are welcome to submit documentation. Nothing on this index is for sale, including a listing, a placement, or a grade.

AI Legal Index

The AI Legal Index is an independent index that tracks changes to AI vendors in legal. It holds 462 vendors across 9 categories, each graded on the same 15 capability axes and recorded against 12 legal signals, from public sources. No vendor pays for inclusion, placement, or rating.

Index Status
Last index update
October 16, 2026
The AI Legal Index is an editorial reference. It is not a regulatory body, not a law firm, and nothing published here is legal advice or a recommendation to retain or avoid a vendor. Records are verified against published sources, bar guidance and public court records. Where a record reads not addressed, the material was not located in public sources on the date shown. See the Methodology page for evaluation standards and limitations.
© 2026 AI Legal Index
3801 N Capital of Texas Hwy, Ste E240 · Austin, TX 78746