Ironclad vs Oneflow: how they compare in 2026
Ironclad is a fit for a legal team that wants AI review in Word alongside a broader contract workflow and agent access through additional work tools. Oneflow concentrates on a shared web agreement tied closely to CRM records, with review findings organized by workspace playbooks. The contract's working environment therefore matters: lawyers already negotiating Word files may favor Ironclad's review route, while sales and legal teams editing a live agreement may favor Oneflow. Their training arrangements are also different. Ironclad uses an opt in for its own model training; Oneflow's AI appendix prohibits training on customer data. In that distinction between consent based learning and an outright prohibition, AI Legal Index identifies one concrete procurement choice. Oneflow's generative AI confidentiality exception remains independent of training, and its lower public entry amount does not price every review feature.
At a glance
All 15 axes, side by side
The same grid applied to every vendor in the index, graded from public sources. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
Intake, the no code Workflow Designer, approvals, signature, the repository and analytics run without AI, and Ironclad sells that system of record as the base of the platform. Ironclad AI sits on top of it. Ironclad Agent takes a plain language request and returns the answer, the contract or the workflow, or hands the task to a specialized agent. Contract Review Agent redlines third party paper against playbooks and, in early access, precedent, Intake Agent pulls terms into launch forms, Renewal Agent briefs upcoming renewals, and Analytics Agent charts contracting data. The agents act on live workflow state, such as where a contract sits in approval, as well as on documents. The contract platform predates generative AI and would still work without the models.
AI supports several substantial contract tasks within Oneflow's wider platform. Write with AI drafts, edits and translates text inside an agreement; AI Extract imports participants, dates and duration into editable metadata. AI Review compares terms with a workspace playbook, and AI Insights aggregates the resulting risks across the portfolio. The premium package adds custom rules, dashboard widgets and a report for negotiation follow up. Electronic signatures, editable HTML agreements, permissions, approvals and renewal reminders continue to work without these models. Customers can disable AI, and several review capabilities remain in beta. AI therefore changes how users analyze contracts without replacing the underlying contract system.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Ironclad's extraction uses two passes to connect values to source text. The model returns each value with a description of where it sits in the contract. A second pass ties that value to the exact OCR tokens, so the interface highlights the passage with its page and position. If the model returns no match, the system tries the raw text and then the normalized value before giving up on a location. Contract Review Agent bases redlines on the customer's playbooks and templates, with precedent based redlining in early access, and redlines can show their rationale. Answers through the MCP connectors link back to the contract in Ironclad. No accuracy figure, error rate or test set is available, and the AI Addendum says output may be incorrect or inaccurate.
Review findings connect to highlighted passages in the agreement, with controls for moving between them. Each finding carries the relevant playbook concept, configured feedback and example clause text. A separate view identifies required clauses that the review did not find, while portfolio charts open the corresponding contract list. This lets the reviewer compare a proposed concern with the actual wording and the organization's rule. Oneflow warns that generated text can misstate facts, numbers and law and recommends human correction. No reproducible accuracy study, error rate or jurisdiction specific evaluation accompanies these features. The contract highlighting supports source verification, not validation of legal authority.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Ironclad Agent routes each request to the right agent or workflow, and the agents work inside existing contracting workflows under the user's permissions. Contract Review Agent proposes redlines, flags risk and applies positions in Ironclad or directly in Microsoft Word, with the final decision left to the reviewer. Playbooks set preferred positions and fallbacks, and answers through the MCP connectors are limited to contracts the user can already open. The AI Addendum makes the customer responsible for reviewing and validating output before using it, and says the AI products are no substitute for human oversight. Agent stop conditions, handback routes and limits on work completed without a person are not specified.
Administrators enable AI Review for a workspace and configure its playbook, including which clauses matter, which findings count as risks or issues, and what feedback appears. Role permissions separately control access to individual reviews and the Insights dashboard. Sent contracts receive continuing analysis; draft contracts require a manual review action. A person can inspect highlighted text, edit the playbook and use example wording when revising an agreement. The AI appendix advises human review before relying on output. No confidence cutoff, mandatory lawyer approval after an AI finding, or correction route for an already approved mistake is specified. Risk colors classify findings rather than stop execution.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Named customers report figures. NEXT Insurance says Contract Review Agent gave legal operations half its time back, and AES reports first pass redlines that took 30 minutes to two hours now reach a first draft in minutes. Signifyd puts an MNDA review or custom order form clause at minutes rather than an hour to a day, and Hormel's senior counsel reports turnaround cut from 12 weeks to 3. A Forrester study drawn from five customer organizations puts the three year return at 314 percent. Apart from that study, the figures come from the customers themselves, undated and with no method stated.
Puzzel's Sales Operations Manager, Anette Johnsen, describes generating offers and contracts from Salesforce opportunities with items from related CPQ quotes. She identifies a concrete benefit of the HTML format: participants revise one agreement instead of uploading successive files before signature. Other named users include Systembolaget's Head of Indirect Sourcing, Tor Myhrman, and Hedin Bil's HR Business Partner, Elin Skoglund, who describe handling agreements and maintaining oversight. These accounts establish operational use across sales, procurement and HR. They do not isolate AI review performance or supply a measured error reduction, evaluation period and sample for Oneflow's current AI packages.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Ironclad's AI Addendum lets it train its own models on customer data, input and output only after a customer enables AI Training Settings in the admin console. An opt out stops new training from that date. That data is first de identified, anonymized and aggregated, and output for other customers may not contain it. Whether or not a customer opts in, Ironclad may use input and output to evaluate the performance and accuracy of the service. External model providers may not train on customer data and run under zero data retention where available. The Enterprise Services Agreement treats customer data as confidential information, and SOC 2 covers the privacy category. The terms say nothing about attorney client privilege or work product, and access follows roles without specified matter boundaries.
The AI appendix expressly prohibits Oneflow from training any AI model on customer data and takes precedence over conflicting general terms for AI features. Ordinary service confidentiality continues while information remains confidential, with restrictions on compelled disclosure. There is a consequential exception: the generative AI section excludes Oneflow's contractual confidentiality obligations along with liability, indemnities and service levels. Review, Insights and Extract have a separate processing section tied to the DPA. Workspace permissions and optional provider controls support access management, but attorney client privilege and work product receive no specific undertaking. The contract therefore requires attention to the exact AI functionality being enabled.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Ironclad markets its AI to legal teams and to sales, procurement and operations users, and describes the platform as built for everyone, lawyers or not. Its AI Addendum states that Ironclad is not the customer's legal advisor, that using the AI products creates no attorney client relationship, and that the customer should consult its own counsel. A separate AI Disclaimer says output is not legal advice and should be verified with a licensed professional before anyone acts on it. Neither document addresses competence or supervision duties, or which jurisdictions the product suits.
Oneflow's AI appendix says output is not legal advice, legal conclusions, recommendations about legal rights or an application of law to a customer's circumstances. It advises human review because generated content can misstate law as well as facts. A separate UK article maps solicitor responsibilities to SRA standards, confidentiality, client communication and supervision, and describes practical review and pilot controls. North American terms also prohibit treating the platform as a substitute for an attorney. The product nevertheless serves sales, HR and other users without legal qualifications. No comprehensive jurisdiction by jurisdiction set of product restrictions or lawyer competence program is supplied.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Ironclad says every AI feature passes through its Evaluation Framework, which measures accuracy, consistency and reliability against curated benchmarks and real contract data. Subject matter experts validate model output during development and after release, with feedback loops meant to catch bias early, and training data is chosen to cover varied contract types and jurisdictions. Dimitry Dukhovny, the chief information security officer, leads security, compliance and AI governance. Customers can review, override and keep governing agent behavior across teams and contract types. Evaluation results and performance differences by contract type, jurisdiction or party are not available.
Oneflow promotes human accountability and warns against automation bias in its guidance for UK legal teams. It recommends evaluating missed issues, overrides and review quality rather than relying only on speed, and says its AI performs best in English and Swedish. These are useful limits and principles for customers designing a pilot. The public material does not identify an accountable AI governance owner, publish a model release evaluation, or report bias and performance differences across languages, contract types or populations. General ISO security controls and a list of security policies concern operational protection; they do not describe a separate AI testing and governance program.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Ironclad's Data Processing Addendum, version 3.10 from 5 March 2026, limits storage of customer personal data to what the services need. It destroys all copies, archives included, within 90 days of the agreement ending, returns data within 30 days on request and issues a deletion certificate within 30 days. A security incident is reported to the customer within 48 hours of Ironclad becoming aware of it. The subprocessor list names each provider, its activity and its location for the United States platform, the EU datacenter and Clickwrap. A new subprocessor comes with 30 days' email notice and a right to object. External model providers run under zero data retention and may not train on customer data. Data is encrypted with TLS 1.2 or higher in transit and AES 256 at rest, with per tenant keys and bring or hold your own key options, and access follows administrator set roles.
Contract data is encrypted with AES 256 at rest and TLS 1.2 in transit. Customers configure permissions and retention policies; administrators can disable optional providers or AI features. Global DPA terms require breach notification without undue delay, while the North American DPA specifies 48 hours. Daily database snapshots last seven days, and system and authentication logs last 90 days. The DPA permits limited residual backups after deletion without fixing that period. Generative AI history can follow provider terms, while the product page promises removal of temporary review and import data. That leaves no single, specific retention schedule for every prompt and output.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
The Enterprise Services Agreement, version 2.2 effective July 2026, governs warranties and financial remedies. Ironclad defends and indemnifies customers against third party claims that the platform infringes intellectual property, and against claims from unauthorized disclosure of customer data caused by its breach of the data and security terms. It warrants that the services materially conform to the agreement and comply with applicable law; if a nonconformity is not fixed within 30 days, the customer may terminate for a pro rata refund. Liability is capped at the fees paid in the prior twelve months, rising to three times that amount for data and confidentiality breaches and the data indemnity. Gross negligence, intentional misconduct and the intellectual property indemnity sit outside the cap, and consequential loss is excluded. The service level schedule targets 99.7 percent uptime, with service credits as the remedy. The customer bears sole responsibility for results from AI output, which Ironclad does not warrant as accurate, and the agreement carries no insurance commitment.
Ordinary global service terms include an intellectual property defense obligation, a material performance warranty and a general cap based on 12 months of fees. Those protections do not carry through unchanged to AI. The appendix supplies AI output as is, disclaims warranties and excludes all liability and indemnification undertakings for generative AI functionality, together with confidentiality obligations and agreed service levels. It also permits specified AI suspensions or termination without reimbursing fees. North American terms contain the same generative AI exclusion. A wrong clause, inaccurate summary or reliance on generated advice has no specific affirmative AI remedy in these published terms.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Ironclad offers native integrations, iPaaS connections to more than 8,000 applications, and an API, with Tray, Zapier and MuleSoft in its directory. The directory names Salesforce, which is AppExchange approved, Coupa, SAP, NetSuite, Zip and Ramp, Microsoft Word and Teams, Slack, DocuSign and Adobe Acrobat Sign, and Box, Google Drive, OneDrive, Dropbox and Egnyte. MCP connectors answer questions about contracts and workflow status in Claude, ChatGPT and Slackbot, scoped to the user's permissions and linked back to Ironclad. No iManage or NetDocuments connector is identified, and the directory does not specify individual field mappings or sync directions.
The Salesforce integration creates interactive contracts from opportunities and transfers contact, company and opportunity data into them. Its configurable sync sends data from Salesforce objects into Oneflow and returns contract values to Salesforce. Product tables can reflect price books or CPQ quotes, while workflows map contract stages back to pipeline stages. Engagement events and status changes appear in the Salesforce timeline, and returned contract data supports dashboards. Oneflow identifies separate setup guidance for older and newer integration versions and compatibility with Professional edition upward. HubSpot, Dynamics 365 and other CRM connections complement this workflow; Salesforce and Dynamics can require premium integration charges.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Ironclad runs as a cloud service on Google Cloud Platform, in multiple zones in the United States, with a separate EU datacenter. For EU hosted customers the subprocessor list places Anthropic and OpenAI, along with Elastic Cloud, Datadog and the product database, in the EU, so AI processing stays in that region too. Clickwrap runs separately on Amazon Web Services in the United States. Customers can bring or hold their own encryption keys. Ironclad does not describe a tenancy model or what changes between plans.
Production infrastructure uses AWS availability zones in Ireland, with document replication and backups in Sweden. Oneflow's AI FAQ broadly describes data as remaining in the EU, and Insights Premium is described as running within Oneflow's own EU infrastructure. The published subprocessor table gives a more varied picture: optional Legly review operates in Germany, optional OpenAI extraction in the United States, and Postmark email processing also in the United States. Administrators can disable optional services. The public descriptions do not fully reconcile these routes or map every AI function to a processing region. No on premises deployment is offered in the published package descriptions.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
Ironclad holds SOC 1 and SOC 2 Type II reports from routine third party audits covering security, availability, confidentiality and privacy, along with ISO 27001, 27701, 27017 and 27018. It runs a GDPR program with standard contractual clauses, complies with HIPAA and holds Cloud Security Alliance Trusted Cloud Provider status, with a public CAIQ on the alliance's site. Penetration tests run each year and vulnerability tests each quarter, and disaster recovery is tested twice a year. Certification documents are requested through a security portal, and the website gives no auditor, audit period or report date.
A public certificate issued by Qvalify covers Oneflow AB's digital solution for contract automation under ISO 9001:2015, ISO 14001:2015 and ISO 27001:2022. It was issued on June 28, 2024 and remains valid through June 30, 2027, identifying the Stockholm organization and its registration number. A June 2026 statement of applicability lists the security controls and their implementation status. The security center separately identifies SOC 1 Type 1 and SOC 2 Type 1 reports issued by Grant Thornton, available under NDA. Those reports concern control design; neither is identified as a Type II examination of operating effectiveness over a stated period.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
Contract Review Agent uses models from Google Gemini, OpenAI and Anthropic, chosen for quality, latency and performance, and Ironclad says it evaluates and swaps in models as they change. Its own models, which learn from aggregated, anonymized data of customers who opt in, sit alongside them. The subprocessor list names Anthropic, OpenAI and Extend for AI and Google Cloud Platform for cloud and AI infrastructure, each in the United States or the EU. A new subprocessor brings 30 days' email notice and a right to object, and AI subprocessors run under zero data retention where available and may not train on customer data. Ironclad does not say which model serves which agent, and a change of model within an existing provider triggers no notice.
The subprocessor list identifies Legly AB for contract review in Germany and OpenAI for extraction in the United States, alongside AWS infrastructure in Ireland and Sweden. Both AI suppliers are optional and controlled through account settings. The AI appendix directs customers to their Data Management page for the current generative model suppliers and their terms. It does not publish model versions or a complete function to model map. DPA provisions require reasonable advance notice of subprocessor changes to the customer's designated email address and allow a 14 day objection. That process concerns suppliers, without promising notice of every underlying model change.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
The base CLM, AI assistant and eSignature products use a custom quote, with deployment led by the customer, Ironclad's legal engineers or a partner. API connections, integrations, extra instances and support plans can add charges. Eligible agents consume a shared pool of AI Credits, with additional use billed at $1 per unit unless administrators enable a cap or buy prepaid packs. Not every AI feature uses those credits, and existing Contract Review Agent seat arrangements continue through the current contract term. Playbook creation and optimization require Professional Services; precedent redlining and Playbook Agent are in early access. A starting platform rate and fixed implementation fee are not specified.
Business starts at $292 a month, billed annually, including five users; Enterprise has ten users and a custom quote. Business includes writing, extraction and summary features. Standard AI Review and Insights have conflicting public treatment: the pricing page marks paid beta additions, while September help guidance says they are included in Enterprise during beta. Insights Premium is explicitly a paid addition for Business and Enterprise. SMS, identity verification, premium integrations and enhanced support can cost more. A 14 day trial needs no card. Implementation has no published amount, and global annual renewals can increase by the greater of 5 percent or Swedish CPI.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Ironclad sells to enterprise and growing companies, with dedicated pages for general counsel, legal operations, procurement, sales and IT. It describes the platform as handling every contract type, from legal and sales to finance, HR, marketing and procurement, from intake through renewal. Named customers include Mastercard, L'Oreal, Cisco, Docker, Gusto and Rippling. The platform centers on contracting, while Contract Review Agent also supports legal questions with embedded citations. Ironclad does not say which organization sizes or contract types it does not serve.
Legal, procurement, sales, finance and HR teams can create and manage agreements in Oneflow. Legal users configure review rules and approve terms; business teams use reusable templates and CRM data for offers, sales agreements and employment documents. Named customers span telecoms, retail, recruitment and public sector purchasing. UK guidance also addresses solicitors using AI for commercial contract review, bringing professional duties into the intended audience. AI is optimized for English and Swedish, with variable results in other languages. The product does not supply a jurisdiction specific research corpus, and its coverage statements do not define supported litigation work or every category of legal agreement.
The 12 legal signals, side by side
Recorded rather than graded. These are the questions a practitioner has to answer before a tool touches a client matter, and the answers are taken from public material only.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
Section 1.1 of the AI Addendum, version 2.1 from 20 April 2026, lets Ironclad train its own models on customer data, input and output once the customer turns on AI Training Settings. The data is de identified, anonymized and aggregated first, an opt out stops new training but not training already under way, and external model providers may never train on it. Ironclad's product FAQ says the default setting depends on the customer's agreement and data location.
The AI appendix forbids Oneflow from using customer data to train any AI models and overrides conflicting general terms for AI issues. Inputs and attributable outputs fall within the customer data definition. The general service license permits improvement and anonymized analysis, and AI feedback may improve accuracy, but those clauses do not remove the express training ban. The product FAQ also says underlying models do not train on customer data.
Separate provider processing, retained history and the generative AI confidentiality exclusion remain relevant to handling client material.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
During the term, the Data Processing Addendum keeps customer personal data only as long as the services need it, and the AI Addendum sets no separate period for prompts and output. All copies are destroyed within 90 days after the agreement ends, with a 28 day window to export the repository. External model providers run under zero data retention.
Oneflow permits customers to set retention policies for stored contracts, and its AI page says temporary import, review and Insights data is removed after use. Generative AI has a different contractual provision: input questions and output responses may remain as history under the model supplier's current terms. No uniform period covers that history or every provider copy. Daily database snapshots last seven days, system logs last 90 days, and residual backups after termination have no precise DPA deadline. Contract deletion therefore cannot be treated as an immediate purge of all AI processing records.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Ironclad keeps its own role based permissions, set by administrators, rather than inheriting them from a document system. Agents and MCP answers respect the same permissions, so a user sees only the contracts already open to them. Nothing describes walls between matters, since the product is built for in house teams rather than firms.
Workspace roles control access to contracts, and Oneflow provides distinct permissions for AI Review and the Insights dashboard. Administrators enable review for selected workspaces and can disable AI features or optional suppliers. These controls can support departmental separation and limit who sees review results. The descriptions do not specify how retrieval enforces every contract permission within a workspace, how restrictions propagate to generated summaries, or how a law firm's matter wall follows an AI request. Permission controls alone do not establish a complete ethical wall mechanism for confidential client matters.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
The Data Processing Addendum commits Ironclad to tell the customer promptly of any government or law enforcement request for its personal data, unless the law forbids it, and to help the customer contest it. The Enterprise Services Agreement allows disclosure of confidential information under a court or government order after reasonable notice where the law permits. No transparency report is available.
Global confidentiality terms require reasonable prior notice when disclosure is legally compelled, unless notice is prohibited, and reasonable assistance at the customer's expense in seeking protection. That gives the customer an opportunity to contest or narrow a request involving ordinary confidential service data. The AI appendix expressly removes contractual confidentiality obligations for generative AI functionality, so the same protection should not be assumed across every AI route.
No transparency report accompanies the commitment. North American and global agreements need to be matched to the contracting entity and enabled services.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Ironclad's AI works over the customer's own contracts, playbooks and workflow data rather than a body of law. Its own models learn from aggregated, anonymized patterns across customers who opt in, and Ironclad cites more than 2 billion contracts processed. No source, scale, license or refresh cycle is given for that training data.
Oneflow's review and portfolio analysis work with the customer's agreements and configured playbook concepts. Example clauses come from the organization's rule setup, and drafting can use selected text as input. No catalog of legislation, reported decisions or licensed legal commentary is supplied for these features. Naming a model provider does not identify the legal sources in its training data or their licensing terms.
The UK educational articles link professional guidance, but those links do not constitute a legal research corpus inside the product.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
Ironclad centers on contracts, while Contract Review Agent can also answer legal questions with embedded citations. No citator, treatment signal or check of later history is described.
Highlighted review passages let a user inspect contract language, not whether a judicial decision remains authoritative. Oneflow has no published citator connection, treatment history service or automated check of legislation's current status. Teams maintain their own playbooks, including preferred and fallback clauses, so changing a rule after a legal development remains an organizational responsibility. The appendix warns that AI can generate incorrect law and recommends human review. A portfolio risk chart or missing clause flag does not establish that the underlying legal proposition remains valid.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
Contract Review Agent flags missing clauses and departures from a company's standards, and extraction highlights the passage each value came from. When the model cannot place a value, the grounding system retries on the raw and normalized text rather than returning nothing. No path for declining to answer, and no confidence signal for the user, is described.
The AI Review interface separates findings from a missing clauses view. That view identifies playbook concepts absent from the agreement, giving the reviewer an explicit negative result instead of merely omitting a match. Red and yellow labels distinguish issues from risks; they are not numerical confidence estimates. Oneflow warns that generated facts and law can be wrong, but does not publish a general abstention rule for drafting or summaries. Missing clause handling is described for review, without promising that every unsupported question will be refused.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
Ironclad has no entry in the AI Hallucination Cases database, Damien Charlotin's record of court decisions involving hallucinated AI content. Ironclad is a contracting platform, and its output is seldom filed with a court as cited authority.
Damien Charlotin's AI Hallucination Cases database contained no entry naming Oneflow as of October 16, 2026. The result covers the database's reported court incidents, not every private use of the product or every inaccurate contract response. Oneflow itself discusses court examples involving generic AI tools in educational material; those examples do not identify Oneflow as the tool involved. Contract drafting and risk analysis can still produce incorrect law, which the AI appendix expressly warns about. The absence of a named incident provides no accuracy guarantee.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Ironclad's AI Addendum and AI Disclaimer say output is not legal advice and should be verified with a licensed professional. No ethics opinion or bar guidance is named, ABA Formal Opinion 512 included.
Oneflow's UK contract review guidance maps SRA standards and conduct duties to human supervision, confidentiality, client transparency and practical controls. It also discusses insurance, data protection and the legal team's responsibility for final judgment. This is a jurisdiction specific mapping with suggested review steps, rather than a generic statement that lawyers remain responsible. It is vendor guidance, not regulator approval or an independent finding of compliance. The mapping does not establish equivalent coverage for every jurisdiction in which Oneflow sells its platform.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
Named corporate customers describe shorter contract reviews and less legal operations work. NEXT Insurance reports recovering half of its legal operations time, while AES and Signifyd describe first redlines and NDA reviews in minutes. The platform serves internal legal, procurement, sales and operations teams handling their organization's agreements. It does not provide a law firm billing workflow or a client fee disclosure process for the time saved.
The vendor's UK AI review material addresses solicitors as well as internal legal departments and promotes faster review with retained professional judgment. Its product pages also describe reducing routine contract work and administrative effort. No accompanying procedure explains how a firm records AI time, adjusts a client invoice, discloses savings or passes through Oneflow charges. Subscription pricing is the buyer's software cost rather than a client billing policy.
Because the audience includes lawyers serving clients, the time savings claims cannot be treated solely as an organization's internal operating expense.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
Ironclad's subprocessor list names Anthropic, OpenAI and Extend for AI and Google Cloud Platform for cloud and AI infrastructure, with locations for the United States platform and the EU datacenter. The Enterprise Services Agreement, Data Processing Addendum and AI Addendum are public in its legal center. A new subprocessor brings 30 days' email notice and a right to object. No notice pack for a client's outside counsel guidelines is available.
Oneflow supplies a public DPA, global and North American service terms, an AI appendix and a subprocessor table with functions and processing locations. Optional AI suppliers include Legly and OpenAI, and administrators can control optional services. A public ISO certificate and statement of applicability support security diligence; SOC reports require an NDA. These materials help counsel explain data handling to a client.
They do not form a dedicated client AI disclosure package, and the generative AI confidentiality exclusion and conflicting regional descriptions require specific attention in any outside counsel approval process.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Ironclad's workflows record routing, assignment and approvals for each contract, and AI review is described as auditable, with humans able to review and override it. Extracted values highlight their source passage and redlines can show their rationale. No export records which model produced an output or who verified it. Ironclad's output is contract work rather than court filings.
AI Insights supports an export of portfolio analysis, and reviewers can inspect the contract passages associated with a playbook finding. Insights Premium adds an action report for internal discussion and negotiation. Enterprise also includes an account audit log, while signing workflows maintain transaction records. The published export instructions do not establish a complete record of model identity, prompt, output and human edits for each AI action.
These are useful contract administration records, but no court disclosure template or complete model provenance export is described for a later filing.
The questions both sides leave open
Derived from the records above rather than written, so it cannot favor either vendor. Take these into both conversations and ask each side the same question.
- Good Law Verification
Which one fits
Choose Ironclad if
- Lawyers primarily negotiate and review contracts in Microsoft Word.
- The team wants supported agent access from several existing work tools.
- Enterprise contract workflow and Word based review belong in one program.
Choose Oneflow if
- Sales and legal prefer to collaborate on a live web agreement.
- Salesforce product tables and pipeline changes must remain connected.
- The contract must prohibit training without relying on a consent setting.
In summary
Ironclad
Ironclad combines enterprise contract workflows with Agent and Contract Review Agent capabilities. Word review and connections through tools such as Claude, ChatGPT and Slack provide several ways to access contract work.
Oneflow
Oneflow uses the same interactive agreement for collaboration and signature, with Salesforce data synchronized around it. Its review display shows playbook findings, example clauses and missing language within the workspace.
Questions buyers ask
Is Oneflow's review surface a Word add in like Ironclad's?
Oneflow's described review surface is inside its agreement workspace, with highlights and playbook feedback. Ironclad's Contract Review Agent supports the lawyer's Word review workflow. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Which Ironclad AI capabilities should be separated from early access?
Its Agent and Contract Review Agent offerings should be distinguished from announced or early access capabilities such as particular precedent redlining functions. A roadmap item does not establish the entitlement in an existing subscription. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
Does opting out of training solve every Oneflow data issue?
Oneflow already prohibits model training in its AI appendix. The separate issue is that its generative AI section excludes contractual confidentiality, liability, indemnity and service level undertakings. From the AI Legal Index, based on each vendor's own published materials as of October 16, 2026. No vendor pays for placement.
What makes the working environment important here?
For a legal team deciding how negotiation happens, AI Legal Index contrasts Ironclad's Word review route with Oneflow's shared web agreement and CRM synchronization. The better fit depends on the files and handoffs the team actually uses.
Neither vendor paid for inclusion, placement or a grade, and neither reviewed this page before it published. Everything on it comes from public material on the dates shown. How the index grades.
Ironclad's early access precedent features are distinct from its existing Word review offering.