P

PostSig

LineageAI reads agreements with their amendments, service orders, side letters, invoices and approvals, decides which terms govern, and answers business questions with clause level citations, using whichever approved model PostSig picks for each task. The inventory, spend and renewal tracking, dashboards, reports and document workspace would still run as a contract and spend system without the models, with inventory data arriving through an API, secure file transfer or a web portal. The same engine sits under Investor Rights Intelligence and VentureOS, PostSig's products for investment firms.

PostSig says every conclusion links back to the agreements, records and provisions behind it, with clause level citations across contracts, agreements and side letters, so a user can open the customer's own documents to check an answer. The MCP page says current terms, citations, calculations and lineage stay attached when answers go to an AI assistant. No accuracy rate, test or evaluation is published. The Terms of Service warn that AI output may be inaccurate, is not a source of fact, and must be validated by the customer before any use. The product does not cite legal authority.

The page for legal teams says PostSig gives business users answers backed by sources so legal can focus on standards and exceptions, and that it does not replace legal review. The MCP page says each request from an approved AI client is checked for user, data set, scope and policy, runs against an explicit CPM or IRI data set, and stays traceable, along with the tools used, the outputs and the access state. Whether AI clients can only read or can also change records is not stated.

The design sends routine contract questions to business users without a lawyer, and no review step, threshold or limit on what answers may be used for is described. The Terms of Service put validation of output on the customer and make any use of AI output the customer's sole risk.

The home page quotes Sheena Clark of UNA Data Group, Gary Glasser of Birch Hill Equity Partners and Chris Petrescu of CP Capital, and adds investor endorsements from Nick Adams, Managing Partner at Differential Ventures, and David Cremin, General Partner at Frontier Venture Capital. Logos shown include CP Capital, CJC, Merlin Ventures, Arch Ventures Partners and Frontier Venture Capital. The headline figures, more than $1 billion of economic value governed, 3.2 million business records connected and 50,000 rights and obligations tracked, describe platform scale rather than customer outcomes.

A September 2025 blog post describes unnamed customers: a global bank that cut 15 Refinitiv terminals, 8 Bloomberg terminals and 8 FactSet workstations, and a hedge fund that avoided a six figure back charge. No measured result is attributed to a named customer. On 28 September 2026 PostSig won Best Data Governance Solution at the WatersTechnology 2026 Inside Market Data & Inside Reference Data Awards, which it described as its sixth award or recognition in 16 months.

The Terms of Service, updated July 2024, bind both parties to confidentiality and require advance notice, where the law permits, before customer data is disclosed under a subpoena or court order. The security page says content is accessible only to authorized users and logically isolated between customers, and the MCP page says tenant, record, document and user level access stays intact when AI clients connect. Section 3.5 of the Terms licenses PostSig to use customer data to provide the service and to create usage data and aggregated data, defined as data deidentified or aggregated so it no longer reasonably identifies the customer or an individual.

Section 3.7(f) lets PostSig use that data to train, develop or enhance its AI models or other large language models, and no opt out is offered. PostSig's home page says there is no training on customer data. The Privacy Policy, updated July 30, 2025, lists generative artificial intelligence providers among its service providers without naming any. How long data is kept after termination beyond a discretionary 30 day window, and privilege, are not addressed.

The Terms of Service limit use to the customer's internal business purposes and say AI output is not to be relied on as a source of fact or a substitute for professional advice, and the page for legal teams says PostSig does not replace legal review. The legal solution page sells automatic translation of legal terms into lay language and less guidance from lawyers to other teams, so that business users answer contract questions themselves. Who reviews those answers is not addressed, and no limit by jurisdiction is stated.

No AI governance framework, accountable owner, testing before release, or finding on how answers perform across contract types or document sets is published. PostSig says it picks an approved model for each task, but who approves models, and against what standard, is not described. Its Best Data Governance Solution award relates to how the product handles customer data, not to how PostSig governs its own AI.

The security page says content is accessible only to authorized users, logically isolated between customers, securely stored and monitored, with defined incident procedures and a Data Processing Addendum on request. The home page adds audit logs, with an audit trail on every workflow, encryption in transit and at rest, penetration testing and a "GDPR-Ready" label. Section 6.3 of the Terms of Service lets a customer request an export by email on termination.

From 30 days after termination PostSig may delete customer data at its discretion, with no obligation to delete, and backups may be kept. The Terms bar customers from uploading prohibited data, including data covered by HIPAA, payment card data, data covered by COPPA or GLBA, and GDPR special category data. No retention period, subprocessor list or incident notification timeframe is published.

The Terms of Service cap liability at the fees paid or payable in the prior twelve months, with breaches of sections 3.1, 3.3 and 10 outside the cap, exclude indirect damages, and warrant only that the service performs materially as documented. Trials and beta features come with no warranty, indemnity or support; trials last 30 days, and liability for them is capped at US $50.00. Use of any AI output is at the customer's sole risk, and the only indemnity runs from the customer to PostSig. High risk activities are excluded from permitted use. California law governs, with venue in San Francisco.

A DocuSign integration imports signed agreements into PostSig in one step. PostSig MCP gives approved AI clients, such as Claude Enterprise, ChatGPT Enterprise, internal applications and enterprise agents, access to its answers after checking user, data set, scope and policy; whether those clients can write back is not stated. Inventory data arrives through an API, secure file transfer or a web portal. ERP and accounts payable data are inputs: those systems still process payments while PostSig checks each invoice against the contract, and reports compare uploaded invoices with the agreed terms.

What syncs in each direction and how connections are configured is not documented, and the partners page names no partners.

The hosting region is a customer choice between the US and the EU, and the provider is not named. PostSig's home page says application services and customer data are hosted in the customer's selected US or EU region, that sensitive records can be kept in the right region and jurisdiction, and refers to regional processing, access and evidence controls. The security page says customer environments are logically isolated.

The Privacy Policy, updated July 30, 2025, says personal information is stored and processed in the United States under standard contractual clauses, and describes PostSig as a data processor for platform data, so the region choice applies to customer data in the platform rather than to the website. No hosting provider, region beyond the US and EU, or deployment option other than the hosted service is named, and where AI processing runs is not stated separately.

The security page says PostSig is SOC 2 Type II compliant, that the audit was conducted by Prescient Assurance, and that the report and detailed security controls are available to customers under NDA on request. Its home page lists encryption in transit and at rest, audit trails and penetration testing. No report period or scope is published.

The site presents LineageAI as its intelligence across documents, and the Terms of Service say aspects of the service rely on AI models. PostSig's home page says it selects the approved model best suited to each task and is not tied to a single provider. The Privacy Policy lists generative artificial intelligence providers among its service providers without naming one. No model, model provider, inference location or change notification is published.

No price, unit or plan is published. The Terms of Service say fees are set in each order and renew at the then current fees, and describe only payment mechanics: in US dollars, due in 30 days, nonrefundable and with a 1.5% monthly late charge. Trials run for 30 days.

The site addresses market data, finance, procurement, legal, and risk and compliance teams at hedge funds, asset managers, banks, venture and private equity firms, family offices and data vendors, with use cases such as invoice reconciliation, renewals, usage and entitlements, DORA evidence and investor rights. Its market pages cover core financial firms, financial service providers, large financial institutions, market data consultants and data vendors, and the about page adds insurers.

Investor Rights Intelligence is pitched as a replacement for Aumni, and VentureOS covers deal workflow, portfolio monitoring, cap tables and LP reporting. The Terms of Service limit use to internal business purposes and bar prohibited data. The contract types and markets it does not handle are not stated. Hendrik Bartel is PostSig's chief executive and one of its founders.