P

Pactly

Models identify clauses and concepts for playbook review, generate proposed revisions and extract values across contract collections. Assist adds questions about a contract's text and history, with proposed edits and comments in Word. Projects applies the same questions to many agreements and returns a structured table with reasoning and source passages. These are core analysis functions alongside the conventional platform: questionnaires generate approved templates, workflows route approvals, signatures execute agreements and reminders track renewals.

Those administrative features do not depend on generative output. Projects is available separately, while Growth and Ultimate include it within an unspecified fair use allowance.

Projects connects an extracted value to reasoning, a quoted source passage and a document view that highlights the relevant text. Users can correct a value, preserve the original AI extraction and mark a result as verified. The guidance names concrete failure modes, including confusion between effective and commencement dates, loss of qualifiers in compound liability caps and missing values in drafts with placeholders.

Word review also exposes the clauses behind each playbook assessment. No reproducible benchmark or measured error rate accompanies these mechanisms. The terms expressly warn that AI answers can be incomplete or wrong and require checking against the source.

Assist never applies a contract edit or comment silently: proposed changes require acceptance and enter Word as tracked changes. A reviewer can reject, revise or copy the proposal, and a support message is not sent without the user's choice. Playbook results can be Uncertain, returning the decision to a human; accepted deviations carry a written justification. Projects preserves corrected and verified values during reruns and identifies outdated results when a column question changes.

The external MCP connection is read only and cannot create, modify, delete or send signature requests. Standalone Word generation remains described as an upcoming release rather than an existing unrestricted action.

A September 2022 case study identifies Virtuos and its Senior Legal Counsel, Johnathan Yong, and describes an NDA process before and after adopting Pactly. Requests previously took several days or sometimes a week across Word, shared drives and email. Following template questionnaires, legal review and DocuSign execution, reported median finalization fell to two hours and median completion of a signed agreement to twelve hours.

Yong describes feedback more than two months after implementation. The account explains the workflow change and measured contract type, although it does not provide the sample size. It measures contract automation rather than the accuracy of today's generative review features.

The service agreement protects nonpublic customer data as confidential information and preserves customer ownership. Its improvement license nevertheless permits analysis of service information involving customer data during the term and use of anonymized aggregate customer data for lawful business purposes afterward. Public marketing says contracts never train AI models, without the same express restriction in the agreement.

Sensitive groups can hide contracts from nonmember administrators, but deliberate sharing and project membership can widen access. The provider list explains where contract data travels. No specific attorney client privilege, work product or accidental disclosure protection is stated for lawyers using these features.

Pactly's agreement says the company is not a law firm, use creates no attorney client relationship and the service does not solicit legal advice. It separately warns that AI answers may be wrong and makes the customer responsible for comparison with the source. Product guidance describes the reviewer accepting edits and resolving uncertain playbook findings, and the company explicitly rejects a fully automatic robot lawyer role.

Corporate legal departments are its principal audience, with business users working through forms and approvals. The material does not map the controls to named bar guidance or publish jurisdiction specific professional responsibility limits.

Published AI guidance explains how customers verify results, handle uncertain findings and correct extraction mistakes. Release notes describe feature changes, and security materials identify a data protection officer and engineering responsibilities for incidents. These do not establish an AI governance program with an accountable model owner, release testing criteria or results on uneven behavior across languages, populations or contract categories.

Positive and negative playbook examples help customers configure review, rather than disclose Pactly's own evaluation program. No formal bias assessment, model card or governance framework accompanies the descriptions of Assist, Projects and playbook review.

Pactly describes encrypted storage and transport, monitoring, backups, vulnerability testing and separate production and test environments. Administrators can require two factor authentication, and high criticality incidents trigger notice to affected customers or all customers when the affected group cannot be identified. A public supplier register details processing functions and regions with advance change notice.

The terms provide sixty days to retrieve data after termination, followed by requested deletion with an anonymized aggregate exception. Assist attachments expire after seven days, but ordinary chat history, backup deletion and underlying AI provider retention lack a complete fixed schedule. No definite breach notification deadline is stated.

The service agreement includes an indemnity for third party claims involving patents, copyright or trade secrets infringed by the service, subject to stated exclusions and control of the defense. Available remedies include replacement, modification, a license or termination with unused fees returned. General liability is capped at fees paid in the preceding twelve months and excludes data inaccuracies and several categories of loss.

AI answers are expressly described as potentially incomplete or wrong, with verification assigned to the customer. There is no separate output accuracy warranty or AI insurance promise. Availability remedies have separate claim deadlines and exclude beta features.

The Word plugin uploads an agreement for playbook review, displays matched clauses and proposed fixes, inserts approved language as tracked changes and records review decisions between rounds. The MCP connection exposes eight read only tools for contract text, metadata, parties, playbooks, clauses and account information to external clients such as Claude and Cursor. Public instructions specify API key or OAuth authentication, administrator consent, filters, returned fields and request limits.

Separate APIs can generate contracts from templates and support webhooks. DocuSign and Adobe Sign support execution, while the Ultimate plan's SharePoint connection is described as backup only rather than general document synchronization.

Core hosting, compute and Bedrock inference use AWS in Singapore by default, with Malaysia for specified Malaysian customers. Structured data in MongoDB Atlas remains in Singapore for all customers. The supplier table separately identifies United States processing for document conversion, OCR, Cerebras inference and fallback Anthropic or OpenAI services, plus Langfuse monitoring in Germany and Cloudflare's global edge.

Those routes make regional hosting different from exclusive regional processing. The SLA also recognizes fully managed private deployments, without a standard public price for them. Singapore and Malaysia have separate service entry points, and the published provider map identifies functions as well as locations.

Pactly identifies ISO 27001 certification in its product, pricing and trust materials and offers its certificate, security whitepaper and penetration test results on request. The public trust FAQ describes Amazon's certified data centers when explaining ISO coverage, so infrastructure attestations need to be distinguished from Pactly's own claim. No openly supplied certificate names its current auditor, validity period and exact company scope.

SOC, PCI and FISMA references in the infrastructure section concern AWS rather than a separate Pactly audit. Security practices include vulnerability scans, access logging, staff training and incident response, without resolving that certification scope question.

Pactly names AWS Bedrock for core inference, Cerebras for tasks requiring low latency, and Anthropic and OpenAI as fallback providers when Bedrock is unavailable. The supplier register identifies processing locations and also lists Langfuse for AI monitoring. Customers can subscribe to at least thirty days' written notice before a new subprocessor is engaged and raise an objection during that period. Exact production model families and versions are not supplied for each feature, nor is there a promise to notify every model version change within an existing provider. External MCP clients bring their own model relationship in addition to Pactly's built in AI.

Standalone Projects starts at $69 a month for one user, fifty documents and 250 monthly runs, or $690 annually with 3,000 runs available immediately. Larger packages, additional documents and extra runs have published charges. The wider CLM starts at $99 per user monthly on an annual plan; Growth is $139 with five users minimum and Ultimate $179 with ten. Their monthly AI review allowances are ten, fifty and one hundred respectively.

Growth and Ultimate include Projects under fair use without a numerical allowance. Enterprise, migration and some implementation services require a quote. Projects has a fourteen day trial, while the CLM trial lasts thirty days.

Pactly primarily serves corporate legal departments, including solo counsel and small teams across Southeast Asia and other Asia Pacific markets. Larger organizations can configure approval routes, business intake and administrator controls. Supported examples include NDAs, services, procurement, leases, employment and software licenses; Projects extends analysis to loan agreements, insurance and related portfolios. Sales, HR, finance and procurement can participate without turning the product into a consumer legal advice service.

The company explicitly describes most customers as internal legal departments rather than firms. No measured language coverage or comprehensive jurisdiction matrix defines where AI interpretation is most reliable.