S

Summize

The product comes in three layers, and only the third is AI. A Knowledge Layer holds playbooks and policies. A Contract Operations Layer runs the lifecycle from first request to signature inside existing tools. The agentic AI layer, SIA, is described as surfacing that knowledge as instant answers. Without SIA, a working contract request, repository and operations system remains, embedded in Outlook, Teams, Slack and Salesforce. Summize presents the layers as distinct, each one powering the next.

SIA is described as giving instant, reliable answers grounded in the customer's own knowledge and standards. That identifies the grounding source as the Knowledge Layer of playbooks and policies, but no retrieval method is described behind it. The security page says Summize evaluates the effectiveness, quality and security of its AI models on a consistent basis. No result, test set, cadence or scope is published for those evaluations.

Summize publishes no accuracy figure. Its materials do not discuss hallucination or name a failure mode, and the published performance figures all measure speed and volume rather than correctness.

Summize says the business becomes more self sufficient while legal remains in full control. It says questions that used to reach legal's inbox are answered instantly by the people who needed them. Its materials do not say what SIA answers alone and what a lawyer approves, and they state no threshold. No review screen is described, and nothing covers what happens when an answer is wrong. Apart from the line that legal remains in full control, Summize describes no oversight arrangement.

Three named customers give attributed quotes. Steven McGeagh at Huel speaks to ease of adoption, Julia Trius at Edpuzzle to receiving agreements already in the required format, and Derek Ihnen at Boon Edam to reduced review time. Customer logos include Revolut, SeatGeek, Miami Heat, Matillion, Sigma Computing, CodeRabbit, KSE and IPC Systems. Summize cites three times faster contract creation, a 40 percent reduction in deal length, a 50 percent reduction in processing time and six times more contracts reviewed.

It puts an NDA at two minutes against two hours. A 4,062 percent ROI is attributed to Nucleus Research, a named analyst firm. None of these figures is tied to a named customer or dated. Huel, Edpuzzle and Boon Edam each also have a case study page.

Under clause 6.1 of the SaaS terms, Summize may store, transmit and process Customer Data only as needed to provide the services, and gets no other rights in it. Clause 6.2 requires physical, technical and organizational measures in line with good industry practice. Clause 6.5 imposes confidentiality with named exceptions. Clause 6.6 requires daily encrypted backups available to the customer on request, and clause 9.2 requires prompt deletion or return of all Customer Data at the customer's choice on termination.

Summize says prompts, completions, embeddings and training data are exclusive to each customer and not available to OpenAI or used to improve OpenAI models. Clause 6.4 reserves the right to use Customer Data in aggregated, anonymized form to improve the software through machine learning, so the agreement permits training. Separation between customers is described as siloed AI, without detail on how it is enforced. Summize's published materials do not address privilege or work product.

Summize markets contract answers to people who are not lawyers, in sales, finance, HR and procurement teams. It says questions that used to reach legal's inbox are taken care of, giving the examples of a salesperson checking renewal terms and a CFO querying payment performance without involving legal. Its materials do not say what the output is and is not, and no disclaimer separates information from legal advice. There is no competence or supervision language, and no jurisdiction limit is stated, although customers are in the UK and the US.

The SaaS terms contain warranties, indemnities and liability caps but no provision on legal advice. The website terms of use disclaim only the website. The marketing line that legal remains in full control describes workflow, not advice.

The security page sets out four AI commitments, each in one sentence: siloed AI practices, regular assessments of effectiveness, quality and security, ongoing updates to AI capabilities, and a customer feedback loop. No one at Summize is named as accountable for AI outcomes. No testing regime before release is described, and no assessment result is published. Nothing addresses bias or uneven output across contract types or counterparties.

The company's General Counsel has written an explainer on the EU AI Act, which comments on the regulation rather than describing Summize's own governance. ISO 27001 is an information security standard and does not cover AI governance.

On termination, clause 9.2 of the SaaS terms requires Summize to promptly delete or return all Customer Data at the customer's option. Retention after that is allowed only where law requires, and confidentiality obligations continue over anything retained. Clause 6.6 requires backups no less frequently than daily, secure and encrypted, in a commonly used machine readable format and available to the customer on request.

Access control rests on ISO 27001, with DevSecOps practices and internal password, equipment and data confidentiality policies described. Clause 3.2 gives an annual audit right over user and password compliance. Summize states that it runs regular third party penetration testing. The agreement sets no retention period for the term itself, only for its end. No subprocessor list is published. Clause 8.4 refers to Appendix 3 as defining Sub-Processors, but the appendix is not included in the published document.

The SaaS terms give the customer an intellectual property infringement indemnity in clause 7.2, covering claims, liabilities, losses, damages and reasonable costs. Clause 7.3 sets one named carve out, for unapproved combinations. Under clause 7.4, which sets out how claims are handled, Summize may not settle without unconditionally releasing the customer. Each liability cap is the greater of a fixed sum or a multiple of charges, so the fixed sum sets a minimum.

Clause 8.3 caps general liability at the greater of £100,000 or 150 percent of total charges. Clause 8.2 sets a separate, higher cap for breach of the security and data protection obligations, at the greater of £500,000 or 500 percent of total charges. Clause 8.1 preserves liability for willful misconduct, and clause 8.4 makes Summize liable for its subcontractors and subprocessors as for itself. Clause 3.6 warrants that the software meets its specification in all material respects and is free of material errors and defects.

Clause 3.5 requires reasonable skill and care, clause 3.8 warrants against malicious code, and clause 7.1 warrants that Summize holds the rights to supply the service. The agreement does not disclaim output accuracy, and Summize publishes no insurance position.

Summize works inside Outlook, Microsoft Teams, Slack, Gmail, Microsoft Word, Salesforce, HubSpot and Jira. It adds Summize Sign for e signature and a Claude integration, and each integration has its own dedicated page. The examples given are a salesperson checking renewal terms inside Salesforce and a CFO querying payment performance across the supplier base. Contract context and assistance are available in the tool, without a new login to manage.

Summize says there is no separate platform to adopt. Implementation runs in sprints of three to four weeks under a methodology Summize calls HERO, with in house implementation staff. A full rollout typically completes within twelve weeks.

On its home page Summize says data never leaves the customer's environment, and its FAQ says the platform is built on Azure enterprise infrastructure. That names the infrastructure provider, but no region is given and nothing says where customer contract data is stored. The only published hosting location is in the website terms of use, which say the Website is hosted on servers in the United Kingdom. That covers the marketing site, not the software.

Summize does not say whether the platform is single tenant or multitenant. Siloed AI, as Summize describes it, covers how prompts and embeddings are handled rather than a tenancy model.

ISO 27001 certification is held, with a badge naming ISOQAR as the certification body and UKAS as the accrediting body. No certificate number, scope, statement of applicability, or issue and expiry dates are published, and there is no trust portal or route to a report. Penetration testing is described as regular and third party, with no firm or dates named. A security whitepaper by CTO Richard Somerfield is offered behind a form.

Summize does not hold SOC 2. It says it audits infrastructure in line with standards including SOC II and intends to work toward SOC II accreditation.

The security page names OpenAI and states that customer prompts, completions, embeddings and training data are not available to OpenAI or used to improve OpenAI models. The FAQ adds that SIA is built on Azure enterprise infrastructure. No specific model or version is named, and Summize publishes no commitment to notify customers when a model or provider changes. No subprocessor register is published. Appendix 3, cited in the agreement as defining Sub-Processors, does not appear in the published text.

The pricing structure sits in the published SaaS terms, and the site has no pricing page. The terms define the Order Form as setting out user numbers and the type of software license, so the charge is per user by license type. The initial term renews automatically for twelve month periods unless 90 days' written notice is given. Clause 2.2(b) limits any renewal increase to 10 percent over the previous twelve month term for the same plan, tier and package, unless a higher cap is agreed.

Payment is due 30 days from a valid invoice. Fees exclude VAT and sales tax but include other taxes, and expenses need prior written approval. No figure, band, tier name or feature split is published.

Five buying teams (Legal, Sales, Finance, HR and Procurement) and eight sectors each have a dedicated page. The sectors are Software, Sports, Finance, Manufacturing, Business Services, Media and Internet, Retail and Telecommunications. Four use cases are published as request, review, repository and analytics. NDAs are named as a specific contract type with a stated handling time. The buyer is a corporate in house function rather than a law firm, and law firms are neither claimed nor excluded.

No organization size is stated, and no contract types beyond NDAs are listed as supported. Government use is not addressed, and nothing says where the product stops.