Agiloft is an enterprise contract lifecycle management platform for legal and procurement teams. It runs contract creation, negotiation, approval, signature, the repository and obligation management across industries from financial services and healthcare to manufacturing and energy. Astra adds Word review against playbooks called Screens, an assistant for contract questions and portfolio analysis. Its free tier includes Word review and limited analysis; Pro starts at $120 per month with annual billing.
AI Trainer also supports custom contract review models without code. ConvoAI Document Q&A answers questions about a contract and links each answer to the highlighted source text. A GenAI Prompt Lab builds saved multistep prompts, and generative redlining proposes insertions and deletions against approved clause language. An Integration Hub built on Workato connects contract data to other business systems. The platform is offered on a single tenant or multitenant basis.
The published Services Agreement and Supplemental Terms state that customer data is not used to train AI models without the customer's explicit prior written consent. They name Microsoft Azure OpenAI Service as an AI subprocessor, commit to prompt notice of compelled disclosure and delete customer data within thirty days of termination. Liability is capped at twelve months of fees, or three times that for security and confidentiality breaches. Agiloft, Inc. is based in Redwood City, California.
Side by side on the same 15 capability axes and 12 legal signals: where the two part company, and what neither one publishes.
Vendors in the same categories as Agiloft whose graded profiles look most alike, with a line on what each product does.
Similar is not the same, so check that each one does the job you need. No vendor pays for placement.
Ordered by how closely the graded profiles match across the 15 capability axes, inside the same categories. See how each axis is graded in the methodology.
All 15 axes, graded from public sources on the date shown. Hover a grade to see what the letter means on that axis.
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
AI Trainer, ConvoAI Document Q&A, the GenAI Prompt Lab, generative redlining and Screens are sold as AI Applications on top of Agiloft's contract lifecycle management platform. The platform's workflows, repository, approvals and integrations predate them. The Services Agreement defines AI Applications as functionality made available as part of the subscription and specified in the order. The Supplemental Terms govern them as a separate add on class. The models drive these features, and the CLM itself runs without them.
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
ConvoAI Document Q&A ties each answer to the passage in the contract that supports it and lets the user jump to the highlighted text, which the vendor calls white box AI. Section 9.3(c) of the Services Agreement states that AI features exhibit varying degrees of accuracy. The Supplemental Terms require the customer to check output independently. Agiloft publishes no accuracy figure, test set, benchmark or evaluation. The tool reads the customer's own contracts rather than primary law, so questions of legal authority do not arise.
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Agiloft's AI features are built so that a person reviews what the models produce. Generative redlining proposes insertions and deletions against approved clause language for a negotiator to accept. Agiloft's own product lead describes it as best used where the language differs in substance, not for minor edits. AI Trainer lets a firm decide what the review model looks for, and ConvoAI answers link to the source text so a user can verify them.
Section 2.3(c) of the Services Agreement makes the customer solely responsible for evaluating output. Agiloft does not publish a threshold at which any AI Application acts without a person, or a route for correcting a wrong output beyond the customer's own review.
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
The vendor states a 99.6 percent implementation success rate without saying how it is measured, and describes its customers as some of the largest companies. The pages carrying these claims name no customer deployment. The site navigation also links a customer stories page and the Pacesetter awards.
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Section 2.3 of the Services Agreement and section 1 of the Supplemental Terms provide that customer data is not used to train AI Applications or AI Models without the customer's explicit prior written consent. Section 4.3 extends that consent requirement to developing or improving the services at all. The platform is offered single tenant or multitenant by order, and section 2.2 confines Agiloft's use of customer data to providing and maintaining the services.
Section 14.3 deletes customer data within thirty days of termination, and section 4.2 allows export at any time. Microsoft Azure OpenAI is named as a subprocessor, and its temporary storage of input and output for abuse monitoring is disclosed. AI service providers are defined as those on the published subprocessor list. The agreement does not address attorney client privilege or work product.
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Section 9.3(b) of the Services Agreement states that Agiloft is not an attorney or law firm or a substitute for one. It adds that Agiloft does not provide advice, explanation, opinion or recommendation about legal rights, remedies, defenses, options, selection of forms or strategies. Section 9.3(c) and the Supplemental Terms state that AI output may be inaccurate and must be verified independently. The product is sold to legal and procurement teams.
Agiloft's published terms do not describe how the product supports a supervising lawyer's duties, and name no jurisdiction limit beyond export control.
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
The vendor markets white box AI that shows its reasoning by linking answers to source text. The Supplemental Terms bind customers to the Microsoft AI Code of Conduct, OpenAI usage policies and the AWS responsible AI policy, and section 3 warrants that insights from usage data are anonymized. Agiloft's terms and product pages set out no responsible AI framework of its own, no ISO 42001 or equivalent standard, no description of testing before release and no statement about uneven output. They name no accountable owner for AI governance. Agiloft also runs a trust portal at trustportal.agiloft.com.
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Section 14.3 of the Services Agreement deletes customer data within thirty days of termination unless law requires longer, and section 4.2 allows export at any time. A subprocessor list is published at a stated URL, and AI service providers are defined by reference to it. Section 16.2 commits to emailed notice of updates to the list. The Supplemental Terms disclose Microsoft's temporary storage of AI content for abuse monitoring.
Section 5.1 commits to organizational, physical and technical precautions against access by employees and subcontractors. Agiloft also publishes a security page and a trust portal. Section 5.3 gives the customer a route for reporting incidents, and an incident notification commitment sits in the DPA.
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
Section 10.1 of the Services Agreement, version 1.2 of 22 July 2026, gives an indemnity for intellectual property infringement. A second indemnity covers unauthorized disclosure or misuse of customer data resulting from a breach of the data use or security obligations. Section 10.2 sets out exclusions, and the mitigation remedies include a pro rata refund. Section 11 caps each party at twelve months' fees and raises the cap to three times that for breaches of the security, confidentiality and compliance sections.
Gross negligence, willful misconduct, fraud and the indemnities sit outside any cap. Section 9.2 warrants material conformity, with a remedy of repair or refund. The Supplemental Terms state that AI output is provided as is and that Agiloft has no liability for any damages arising from use of output. Neither document mentions insurance.
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
The Integration Hub is an embedded integration platform powered by Workato. Agiloft states that the hub connects its platform to hundreds of other systems through connectors and recipes. Public help documentation sits on the Agiloft wiki, and the Services Agreement addresses Third Party Services. The pages describing the hub cover its depth in general terms and do not say what a firm must configure or which systems sync in which direction. Agiloft also publishes an integrations page.
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
The Services Agreement defines the core platform as available on a single tenant basis, meaning a dedicated cloud environment for one customer, or on a multitenant basis. The order selects between them. An EU Data Act addendum exists for EU customers. The published terms state no region list, hosting provider or processing location for the AI providers. Additional security resources are available through Agiloft's trust portal.
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
Section 5.2 of the Services Agreement states that Agiloft has completed audits by an independent auditor of the design and effectiveness of its security controls. Customers may obtain the reports through the trust portal at trustportal.agiloft.com, where they are treated as confidential information. The agreement does not name the audit standard, the auditor or the coverage period, or say whether a prospect can obtain a report without asking.
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
The Supplemental Terms name Microsoft Azure OpenAI Service as the provider behind certain AI Applications. They disclose that Microsoft temporarily stores input and output for abuse monitoring, with human review of flagged content. The incorporated acceptable use policies are Microsoft's, OpenAI's and AWS's, which identifies the set of providers. AI service providers are defined as those on the published subprocessor list, and section 16.2 commits to emailed notice of changes to that list. The terms name no model and state no inference location.
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Astra has a free plan with 1,000 monthly analysis units and up to three custom playbooks. Word review and redlining do not consume those units. Pro starts at $120 per month with annual billing and offers larger analysis allowances and unlimited custom playbooks. Advanced has custom pricing, single sign on and dedicated support. The broader CLM subscription still uses an order specifying user types, quantities and additional services.
Enterprise implementation is handled by Agiloft or a partner. The Astra entry rate is separate from the price of CLM deployment, its integration package and enterprise configurations.
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Solution pages address legal and procurement functions and seven industries, and the product is sold to enterprises. The platform is offered single tenant or multitenant, with an EU addendum. The Services Agreement bars use for high risk activities. Agiloft's pages name no contract type or practice area as unsupported and describe no law firm use.
The public pages on file for Agiloft, with the recorded signals each one supports and the date it was last read. Open any of them and check the reading against the record.
Client Data in Training, Prompt and Output Retention, Ethical Walls and Matter Segregation and 2 more
Read Sep 6, 2026
Refusal and Uncertainty Behavior
Read Sep 6, 2026
Fabricated Citation Record
Read Oct 15, 2026
Astra Free includes 1,000 analysis units each month and three custom playbooks. Word review and redlining do not use the allowance. Pro starts at $120 monthly with annual billing and larger analysis packages. Advanced and the broader CLM platform require a quote; CLM use limits and additional services are set in the order.
Implementation: Astra starts through the Word add in or contract upload without a separate implementation project. Advanced includes dedicated onboarding and support. Enterprise CLM implementation uses Agiloft Professional Services or a certified partner, with fees set separately.
Note: The stated Pro amount is for Astra contract intelligence. It is not an entry price for the full CLM platform. Analysis consumption depends on volume and complexity; contract review in Word is outside that consumption meter.
The Astra October 2026 release extends confidence scores from core data fields to Standards, Questions and AI Columns in AI Projects. The same confidence icons now sit beside the document in the viewer, where a reviewer can mark a manual review or accept or overwrite a flagged value without leaving the clause.
A signal records what public sources say on the date shown. It is not a grade and it is not a recommendation. Where a signal reads Not addressed, it means the index did not locate the material in public sources on that date, which is a statement about disclosure rather than about the product.
Can material a lawyer puts into this product be used to train a model?
Training occurs only where the customer has affirmatively enabled it.
Training on customer data happens only if the customer affirmatively enables it, and the switch is written consent under the agreement. Agiloft's service and supplemental terms require explicit prior written customer consent before client content is used to train an AI model. Section 4.3 provides that Agiloft does not use customer data to develop or improve the services without the same consent. Usage data, defined to exclude the contents of customer data, may be used to improve the AI Applications.
How long does the product keep what a lawyer typed, and can that be set to zero?
A specific retention period is published and the customer cannot change it.
Section 14.3 of the Services Agreement deletes all customer data, which includes input and output, within thirty days of termination unless law requires longer. Section 4.2 allows export at any time during the term. The Supplemental Terms disclose that Microsoft temporarily stores AI input and output for debugging and abuse monitoring. The terms set no shorter or configurable window for prompts and outputs during the term, and the customer cannot change the published period.
Does retrieval respect the firm’s ethical walls, or can the model read across them?
The product maintains its own permission model, documented, requiring the firm to keep it aligned.
The Services Agreement sets out separation at the tenant level. It defines single tenant as a dedicated cloud environment for one customer and multitenant as an environment that may be shared, with the choice made in the order. Section 2.2 confines Agiloft's use of customer data to providing the services. The agreement does not describe matter level or department level walls within a customer's instance, or how the AI Applications respect user permissions. Agiloft also publishes a security page.
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
Terms commit to notice where lawfully permitted. No transparency report located.
Section 7.3 of the Services Agreement permits disclosure of confidential information, which includes customer data, to the extent required by law. Where legally permitted, the receiving party must give the disclosing party prompt notice of the compelled disclosure and reasonable assistance should it wish to contest it. Section 5.1 refers to the same clause for compelled access to customer data. Agiloft publishes no transparency report.
Where does the law in this product come from, and does the vendor have the right to use it?
No located public material identifies the corpus behind the product’s answers.
The product is not built on a legal corpus. ConvoAI answers questions about the customer's own contracts with links to the source passage, AI Trainer learns from the customer's own documents, and generative redlining works from the customer's approved clause language. Agiloft's news releases and terms name no primary law source, license or update cadence.
Does the product tell you when the authority it just cited has been overruled?
No located public material addresses whether authority is checked for subsequent history.
The product does not retrieve or cite primary law. Its output is contract answers, redlines and extracted data, and Agiloft's site and documentation say nothing about checking an authority for subsequent history.
What does the product do when the answer is not in the corpus?
The vendor describes refusal or abstention behavior in public materials.
ConvoAI Document Q&A links each answer to the supporting passage so the user can verify it in the source, which the vendor markets as white box AI. The product documents how a user checks an answer rather than what the model does when it cannot answer. Neither the February 2025 release nor the terms state an abstention path or confidence signal for questions with no supporting passage. The terms require independent checking of every output.
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court order, opinion or disciplinary record addressing fabricated or hallucinated legal citations produced by this product has been located as of the date shown. This is a statement about the public record on that one subject, not a finding about the product, and this signal is not a litigation history.
As of October 15, 2026, the AI Hallucination Cases database has no tool entry naming Agiloft or its Astra product. An unrelated reference to AstraZeneca does not identify this contract software. Agiloft's playbook review and contract questions can still generate material requiring lawyer verification. The absence of a named court entry concerns the database's case coverage and does not measure the correctness of any particular generated clause or answer.
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
No located public material engages with bar or ethics guidance.
Section 9.3(b) of the Services Agreement addresses the line between tooling and legal advice, and the Supplemental Terms incorporate the AI providers' acceptable use policies. Neither the terms nor Agiloft's news releases name an ethics opinion, bar rule or professional responsibility framework, or any bar or regulator guidance on lawyers' use of AI.
Does the vendor address what happens to the bill when the work takes an hour instead of six?
The product does not touch a fee between a lawyer and a client. It operates before an engagement exists, or it is bought by a team that bills no client for the work. Savings claims aimed at the buyer’s own cost are recorded in the summary and do not make the row a savings claim, because no client bill is in the loop.
The product is sold to legal and procurement teams inside companies, which bill no client, so it sits outside a lawyer to client fee relationship. Agiloft frames its savings in cycle time and negotiation loops rather than fees. Its materials do not address how AI assisted work is recorded or disclosed on a bill, and no law firm is a named buyer segment.
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
A current subprocessor or model provider list is published.
Agiloft publishes a current subprocessor list, and the Services Agreement defines AI service providers as the third party AI providers listed on it at a stated URL. The agreement commits to emailed notice of updates. The Supplemental Terms name Microsoft Azure OpenAI Service, disclose its content handling, and incorporate the Microsoft, OpenAI and AWS policies. The DPA is published. Together the terms give a firm material it could show a client.
If a judge’s standing order requires an AI disclosure, can the product produce one?
No located public material addresses court disclosure or verification certification.
ConvoAI's source linked answers let a user verify each answer inside the product. Agiloft's news releases and terms do not describe exporting a record of the model used, sources and human verification for a court, or certifying AI assisted work. The product produces no work product meant for court.
Every grade and every signal on this index is drawn from public sources and dated. If a record is wrong, out of date, or missing an artifact the index did not locate, send the source and it will be reviewed and the record redated. Vendors are welcome to submit documentation. Nothing on this index is for sale, including a listing, a placement, or a grade.