I
Inhubber
Inhubber is contract management software from key2contract GmbH in Berlin, sold to companies of all sizes for procurement, finance, legal, HR, logistics and sales teams. It stores contracts in a repository encrypted on the user's side, tracks deadlines and obligations, routes approvals between reviewers, editors and approvers, and records every action in an audit trail anchored to a private Ethereum blockchain. Contracts can be signed with a simple electronic signature, a blockchain sealed signature, or an eIDAS QES signature through its partner Nect.
The AI, included in the Standard and Professional plans, summarizes contracts, extracts dates, payment schedules and obligations, and flags financial and legal risks such as unlimited liability, marking clauses red, yellow or green and pointing out missing clauses. Inhubber claims accuracy above 90 percent without publishing a method. Data is hosted on AWS and DigitalOcean in Frankfurt, and the company states an ISO 27001:2022 certificate from Proks Certification.
Inhubber began as a university research project and names rebuy, Ansorge Logistik and 17er Oberlandenergie in case studies, with EDEKA Baur and the OECD among its logos. It publishes no prices or customer terms, and offers a data processing agreement on request.
Inhubber, head to head
Side by side on the same 15 capability axes and 12 legal signals: where the two part company, and what neither one publishes.
Capability grades
All 15 axes, graded from public sources on the date shown. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
Inhubber's AI sits in the Standard and Professional plans, and the Basic plan runs without it. On those plans it writes a summary of each contract covering partners, payment terms and key obligations, extracts start and end dates, milestones and payment schedules, and analyzes financial and legal risk. The risk analysis flags language such as unlimited or unusually broad liability, marks clauses red, yellow or green, and points out missing clauses and deviations from standard terms.
It reads PDF, DOCX and XLSX files, with OCR for scans. The repository with encryption on the user's side, deadline reminders, approval workflows, the blockchain audit trail and electronic signatures make up the rest of the product and all work without the AI. Ansorge Logistik and 17er Oberlandenergie describe using the AI summaries day to day, while rebuy runs Inhubber without the AI features.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Inhubber's AI document analysis page claims accuracy levels over 90 percent, rivaling human reviewers, and attributes results to pre trained legal models, continuous learning and human validation. No method, test set, contract types or date stands behind the figure, and it appears on no other page. Risks are marked directly in the contract with colored indicators, so a reader sees the flagged clause in place. Extracted dates and summary points are not linked back to the passages they came from on any product page.
The results widgets on Inhubber's pages show 0 percent in every slot. A November 2025 blog post claims time savings of up to 60 to 70 percent and says more than 95 percent of obligations are completed before their due dates, with no source for either figure.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
Inhubber's AI page says material legal differences should still be reviewed by the responsible business or legal teams, and the German version leaves the final comparison with the responsible departments. The product assigns reviewer, editor, observer, approver and auditor roles, with configurable tasks, approvals and escalations, but these govern the contract workflow rather than the AI's output. A blog post says the machine learning learns from user corrections.
No page describes whether summaries, extracted dates or risk colors take effect without a person confirming them, how a user corrects an extracted deadline, or what the AI may not be used for. The AI page describes the AI as an assistant to legal expertise, not a replacement for it.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
Inhubber publishes dated case studies with named customers. Ansorge Logistik, a company of about 500 employees, uses the AI summaries daily, and Markus Sauter of its accounting and contract management team says a 40 page contract can be understood in a few sentences. Its cleanup found 5 to 10 outdated contracts still running (November 2025). At rebuy, Frank Kurzer, head of the legal department, credits deadline monitoring with avoiding unwanted extensions and saving thousands of euros, while the legal team still reviews contracts by hand (May 2025). 17er Oberlandenergie, a utility of 11 to 50 employees, uses AI summaries and overviews (September 2026), and TTI Group reported paper costs down 50 percent in 2021.
Logos include EDEKA Baur, Ankerkraut, the OECD, Apetito, Kreis Paderborn and Stadtwerke Penzberg, and the site claims more than 10,000 users. The SAENTIS Family Office study shows only placeholder figures, though the legal page quotes it as saving around 80 percent of the time.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Inhubber's security page, updated September 2026, says documents are encrypted just before upload, that only the machine on the user's side can read their contents, and that zero knowledge encryption and selective disclosure meet GDPR requirements. The AI page adds that even Inhubber cannot access the content, and the German privacy policy says Inhubber has no control over or access to it. No page explains how server side AI analysis reads documents that are encrypted on the user's side.
Inhubber publishes no customer terms, and its data processing agreement is available on request. No page states whether customer contracts are used to train or improve its models. Privilege and work product are not mentioned.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point. Where the advice line is not the duty a product raises, the axis is read through the nearest professional duty it does raise: judicial conduct rules and the reviewing duty for products sold only to courts, and the duty to bill for time actually spent for products that draft time entries.
Inhubber's AI page says the AI acts as an intelligent assistant rather than replacing legal expertise, and the German page says the software does not replace a legal assessment. It recommends that material legal differences be reviewed by the responsible business or legal teams. The product is sold to procurement, finance, HR, logistics and sales as well as legal teams, and its AI analysis of legal risks is available to all of them.
The German legal page carries the heading contract management for law firms while its text addresses in house legal departments. Inhubber publishes no customer terms, so no disclaimer of legal advice appears in a contract, and nothing addresses the German Legal Services Act or professional duties.
AI Governance and Bias Disclosure
Published governance over model behavior: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Inhubber publishes no AI governance material. No responsible AI page, EU AI Act statement, named owner for model behavior, testing process, model card or AI management certification appears on its product, security, privacy or blog pages. The only statements about how the models behave are the claim of more than 90 percent accuracy and the reference to pre trained legal models, continuous learning and human validation, none of which comes with a method.
The use case page promises human validation without saying who validates or when. Its ISO 27001 certificate covers information security for the platform's development, operation and support rather than model behavior. Nothing addresses whether risk flags differ across contract types or across languages, though Inhubber says the AI reads contracts in any language.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
Inhubber's security page describes AES 256 encryption in transit and at rest, encryption on the user's side before upload, hosting on AWS and DigitalOcean in Frankfurt, and automated unit and integration tests with manual regression testing. Its privacy policies, dated June 2022 in German and January 2023 in English, cover personal data in general and name co founder Andre Sokolov as the contact. They say personal data is kept no longer than necessary, that name, email, blockchain address and password hash remain after deactivation, and that users may ask for deletion at any time, without a timeline.
Subprocessors are described only by category, such as IT, hosting, error logging, advisers and payment, with no named list and no AI provider. Breach handling is a promise to follow applicable law. Nothing states what happens to contracts, summaries or risk analyses when a customer leaves. A trust center for key2contract GmbH sits on the SECJUR compliance platform.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
Inhubber publishes no customer terms. Its footer, imprint, pricing page and free trial page carry no link to terms of use, a subscription agreement or general terms (AGB). No liability cap, warranty, indemnity or treatment of AI output can be read before signing. The data processing agreement is offered on request. The only statements about AI output are on product pages, which describe the AI as an assistant that does not replace a legal assessment and recommend that the responsible teams review material legal differences. The accuracy figure of more than 90 percent on the AI document analysis page carries no warranty or remedy.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Inhubber's integrations page lists Microsoft SharePoint, Microsoft single sign on, Nect for identity checks and QES signatures, Evaco, Outlook Calendar, Google Docs and Sheets, and migration from DocuSign and Adobe Sign. SAP is marked beta, and Microsoft Office 365, Salesforce and Shopify are marked upcoming. API integrations are part of the Professional plan, and a feature FAQ mentions automated SharePoint sync, but the site publishes no API documentation or description of what any connector moves.
A help center at help.inhubber.com sits alongside the main site. The signature module imports contracts signed elsewhere and exports signature reports as PDFs with timestamps and participant identities.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Inhubber's security page says contract data is stored only in German data centers, on AWS and DigitalOcean in Frankfurt am Main. Where the AI processing runs is not stated separately. The AI document analysis page offers cloud, hybrid or on premises deployment, while the product and feature pages describe a cloud service only. The privacy policies say Inhubber does its best to keep data within the EEA and treat use of the service as consent to transfers abroad under standard contractual clauses.
No tenancy model is published, and the blockchain that anchors the audit trail is described both as a consortium and as a private Ethereum network.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
Inhubber's security page states that the company holds ISO/IEC 27001:2022 certification from Proks Certification GmbH, an auditor it describes as accredited by DAkkS. The certified scope covers the development, operation and support of the platform with its IT infrastructure, processes and personnel. No certificate number, issue date or download is published on that page. A case study by the compliance platform SECJUR describes taking key2contract from first inquiry to a passed ISO 27001 audit in two months, and a trust center for the company sits on SECJUR's platform.
An older blog FAQ attributes ISO 27001 to the data centers instead. The signature FAQ says signature reports meet SOC 2 audit requirements, though no SOC 2 attestation is listed.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
Inhubber does not name the models behind its summaries and risk analysis, their provider, or where they run. Its pages refer to pre trained legal models, natural language processing and machine learning that learns from corrections, and its AI page mentions ChatGPT only as a point of comparison. The use case page says the models learn continuously, without saying from whose data. The privacy policies describe subprocessors by category without naming an AI provider, and no change notice for models or subprocessors is published.
The security page names AWS and DigitalOcean as hosts, which covers storage rather than the models. Whether the AI runs on Inhubber's own servers in Frankfurt or with an outside provider is not stated.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
Inhubber's pricing page lists Basic, Standard and Professional plans without prices. Basic and Standard carry a request for a price and Professional a contact sales link. Basic allows 50 contract files per user and 1,000 documents and has no AI. Standard and Professional add AI summaries and financial and legal risk analysis, and Professional adds API integrations. The page mentions per contract pricing, a saving of up to 33 percent on annual billing and a free trial without stating its length.
G2's listing, supplied by the vendor, shows Basic from $16.99 and Standard from $44.99 per seat a month, figures that do not appear on Inhubber's own site.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Inhubber is sold to businesses of all sizes, from SMEs to large organizations and public bodies. Its team pages cover procurement, finance and controlling, legal, HR, logistics and sales. Its industry pages cover retail, the public sector, energy, manufacturing, financial and regulated firms, healthcare, real estate, education, hospitality, e commerce and professional services, and a use case covers holdings, groups and subsidiaries.
The AI is said to read contracts in any language, with German, English and French given as examples, and the interface is in English and German. Case studies come from logistics, energy, retail and a family office, and the legal page speaks to legal counsel, compliance officers and paralegals. The German legal page addresses law firms in its heading and legal departments in its text. No limits are stated for contract types, languages or company size.
6 public documents
The public pages on file for Inhubber, with the recorded signals each one supports and the date it was last read. Open any of them and check the reading against the record.
-
inhubber.com/en1 signal
Outside Counsel Guideline Readiness
Read Oct 10, 2026
-
inhubber.com/en/all-teams1 signal
Billing and Fee Posture
Read Oct 10, 2026
-
Bar Guidance Alignment
Read Oct 10, 2026
-
Court Disclosure Support
Read Oct 10, 2026
-
Ethical Walls and Matter Segregation
Read Oct 10, 2026
-
Fabricated Citation Record
Read Oct 10, 2026
No published figure
- Inhubber does not show prices on its website. You ask for a quote.
- There are three plans, called Basic, Standard and Professional.
- Basic has no AI and holds 50 contract files per user and 1,000 documents.
- The AI summaries and risk checks come with Standard and Professional.
- Paying yearly saves up to 33 percent, and there is a free trial.
Inhubber's pricing page lists Basic, Standard and Professional without prices, inviting a price request for the first two and a sales contact for Professional. It mentions per contract pricing and a saving of up to 33 percent on annual billing. Basic has no AI and is limited to 50 contract files per user and 1,000 documents.
Implementation: Not stated.
Confidentiality and data terms: Not applicable. Inhubber offers a data processing agreement under GDPR on request.
Note: No price appears on Inhubber's pricing page, so no entry price is shown. G2's listing, supplied by the vendor, gives Basic from $16.99 and Standard from $44.99 per seat a month. Those figures are third party and are not used here. Inhubber publishes no customer terms.
Legal Signals
What each signal meansA signal records what public sources say on the date shown. It is not a grade and it is not a recommendation. Where a signal reads Not addressed, it means the index did not locate the material in public sources on that date, which is a statement about disclosure rather than about the product.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
No customer agreement, terms of service or equivalent contract is published on any surface located, and no policy page states a position on training. Nothing is granted and nothing is withheld, so a client has no term to hold the firm to. Where a policy page does state a position, the row takes the matching policy value instead and the summary records that no agreement exists.
Inhubber publishes no customer terms, subscription agreement or general terms, and its data processing agreement is available only on request. No product, security, privacy or blog page states whether customer contracts are used to train or improve the models behind its summaries and risk analysis. The security page says documents are encrypted on the user's side and that zero knowledge encryption and selective disclosure meet GDPR requirements, and the AI page says even Inhubber cannot access the content.
A blog post says the machine learning learns from user corrections, without saying whose data that learning draws on or whether customers can turn it off. The privacy policies cover personal data rather than contract content.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
No located public material states how long prompts and outputs are retained.
Inhubber's privacy policies say personal data is kept no longer than necessary, list the account details kept after deactivation (name, email, blockchain address and password hash), and let users ask for deletion at any time without a timeline. No page states how long contracts, AI summaries or risk analyses are kept, whether they are deleted when a customer leaves, or what any AI provider retains. The security page describes hosting on AWS and DigitalOcean in Frankfurt with encryption at rest, without a deletion schedule.
With no customer terms published, no contractual retention period exists to read, and the data processing agreement is available only on request.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
The product maintains its own permission model, documented, requiring the firm to keep it aligned.
Inhubber keeps its own permission model. Users take reviewer, editor, observer, approver and auditor roles, tasks and approvals are assigned per contract, and the security page describes documents encrypted on the user's side with selective disclosure, so only authorized parties can read them. Microsoft single sign on is listed among its integrations. Every action is recorded in an audit trail anchored to a private Ethereum blockchain, which stores cryptographic proofs rather than contents.
Groups with subsidiaries are a stated use case. No page describes how AI analysis reaches documents that are encrypted for specific users, or how one customer's data is kept apart from another's in the Frankfurt hosting.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
No located term or policy addresses third party requests for customer data.
Inhubber's privacy policies, the only legal documents on its site, do not address requests from authorities or other third parties for customer data, and no customer terms or data processing agreement are published. The policies say Inhubber does its best to keep data within the EEA and treat use of the service as consent to transfers abroad under standard contractual clauses. The security page says documents are encrypted on the user's side and that Inhubber cannot read their contents.
A trust center for key2contract GmbH sits on the SECJUR compliance platform. No transparency report is published, and nothing says whether a customer would be told of a request.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
No located public material identifies the corpus behind the product’s answers.
Inhubber's AI reads the customer's own contracts to summarize them, extract dates and flag risks, and does not retrieve case law or legislation. It handles PDF, DOCX and XLSX files with OCR for scans, and Inhubber says it reads contracts in any language, naming German, English and French. Its pages attribute results to pre trained legal models and continuous learning without naming the models, their provider or the data they were trained on.
The risk analysis compares clauses against standard terms and flags missing clauses without saying whose standard terms it uses or how customers set their own.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
No located public material addresses whether authority is checked for subsequent history.
Inhubber manages, signs and analyzes contracts and does not cite case law or legislation, so a citator sits outside the product. Its risk analysis flags missing clauses and deviations from standard terms, marking them red, yellow and green, and names unlimited or unusually broad liability as one pattern it catches. The CLM page says the AI suggests missing clauses after scanning each signed contract. Nothing published says how those standards are kept current with changes in the law or in which jurisdictions they were drawn up.
Refusal and Uncertainty Behavior
What does the product do when the answer is not in the corpus?
No located public material addresses what the product does when it cannot ground an answer.
No page describes what Inhubber's AI does when it cannot find a date or classify a clause. Risk flags come as red, yellow and green markings in the contract, and no confidence measure is shown for summaries or extracted values. The AI document analysis page claims accuracy above 90 percent and recommends that the responsible business or legal teams review material legal differences. A blog post says the machine learning learns from user corrections, and the use case page mentions human validation without describing when it happens.
Fabricated Citation Record
Does a public court record exist addressing fabricated or hallucinated legal citations in output from this product?
No court order, opinion or disciplinary record addressing fabricated or hallucinated legal citations produced by this product has been located as of the date shown. This is a statement about the public record on that one subject, not a finding about the product, and this signal is not a litigation history.
The AI Hallucination Cases database maintained by Damien Charlotin, which records court decisions worldwide that address hallucinated AI content and the tool involved where known, has no entry naming Inhubber or key2contract. Inhubber stores, signs and analyzes contracts for companies rather than producing court filings, so its output does not ordinarily reach a brief. Its AI summaries and risk flags stay inside the contract record.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Public materials refer to professional responsibility in general terms without naming guidance.
Inhubber's AI pages say the AI assists rather than replaces legal expertise and does not replace a legal assessment, and they recommend review of material legal differences by the responsible business or legal teams. The product is sold to procurement, HR, sales and other teams outside legal, which receive the same AI analysis of legal risks. No professional conduct guidance or ethics opinion is named, and with no customer terms published, no advice disclaimer appears in a contract.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
The product does not touch a fee between a lawyer and a client. It operates before an engagement exists, or it is bought by a team that bills no client for the work. Savings claims aimed at the buyer’s own cost are recorded in the summary and do not make the row a savings claim, because no client bill is in the loop.
Inhubber is bought by companies to manage their own contracts across procurement, finance, HR, logistics, sales and legal, and its named customers are companies and public bodies, so no client bill sits in the loop. rebuy's legal department uses deadline monitoring to avoid unwanted contract extensions, a saving on the company's own contracts. Its German legal page is headed contract management for law firms while its text speaks to legal departments, and a November 2025 blog post aimed at lawyers claims time savings of up to 60 to 70 percent. Nothing published addresses fee treatment of AI assisted work for a firm that bills a client.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
The material exists behind a sales conversation or an executed agreement.
Inhubber offers a data processing agreement on request and publishes no subprocessor list, describing subprocessors in its privacy policies only by category. A trust center for key2contract GmbH sits on the SECJUR compliance platform, and a SECJUR case study describes the company passing its ISO 27001 audit two months after first contact. The security page names AWS and DigitalOcean in Frankfurt as hosts and states the certification.
No AI provider is named, so a customer cannot pass a model provider list to its own stakeholders from published material.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Some elements of the record are available, short of a document level export.
Inhubber records every action, from edits to signatures, in an audit trail anchored to a private Ethereum blockchain, and signature reports export as PDFs with timestamps and participant identities. Only cryptographic proofs, not contents, are written to the blockchain. Signature options run from simple electronic signatures to QES through Nect, and the FAQ claims all three eIDAS levels while the product offers no separate advanced signature.
Nothing published says whether AI summaries or risk flags are marked as machine generated in that trail or which model produced them. Inhubber's output is a contract repository, signatures and reports rather than court filings, and no disclosure template is published.