Diligen
ML-powered contract review automation for due diligence and compliance with NLP-based clause extraction across 200+ provision types.
Diligen is an ML-powered contract review platform designed for legal teams, compliance officers, and deal professionals who need to accelerate due diligence and contract analysis workflows. The platform uses natural language processing to automatically extract and analyze over 200 clause types from contracts, identifying key provisions, obligations, risks, and compliance requirements without manual review. Rather than reading through lengthy documents line by line, users receive structured data on critical contract elements—such as termination clauses, indemnification provisions, payment terms, and regulatory obligations—enabling faster risk assessment and informed decision-making. Diligen integrates into existing legal workflows and document management systems, allowing teams to process contracts at scale while maintaining consistency in how provisions are identified and flagged. The tool is particularly valuable in M&A due diligence, vendor management, and regulatory compliance scenarios where contract volume and complexity would otherwise require weeks of manual legal review.
The policy states data is used to 'Personalize and improve the Diligen Services' and mentions 'Monitor and analyze trend
No training opt-out mechanism was identified in the legal documents.
High risk across multiple dimensions. Only use with public, non-sensitive data.
The policy states data is used to 'Personalize and improve the Diligen Services' and mentions 'Monitor and analyze trends, usage, and activities' but does not explicitly state whether user content is used to train AI models. The vague language about improvement purposes creates moderate risk for shadow AI training.
“Personalize and improve the Diligen Services, and provide content or features that match your interests and preferences”
The policy indicates users grant Diligen rights to store and process content ('We also store the files or other information that you upload') and share it for collaboration purposes, but the scope of the license granted is not explicitly detailed. This creates moderate ambiguity about the breadth of rights granted.
“We also store the files or other information that you upload or provide to the Diligen Services in order to be able to provide you with the features and functionality”
The policy explicitly shares data with multiple third parties including AWS, Stripe, Google, Sentry, and allows sharing with employer administrators, collaboration partners, and third-party applications. Broad sharing across multiple categories creates high risk.
“We may share your information with third-party vendors, consultants and other service providers...Amazon Web Services, Inc. Sentry...Stripe, Inc. Google, Inc.”
The policy allows deletion of account information but states 'we may retain certain information as required by law or for legitimate business purposes' and 'cached or archived copies' may be retained. Indefinite retention of archived data creates moderate risk despite deletion options.
“we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time”
The policy does not explicitly address IP ownership of user-generated content or outputs. The silence on this critical issue creates moderate risk, as it's unclear whether users retain ownership or Diligen claims rights to outputs.
“No explicit statement regarding IP ownership of user content or AI-generated outputs found in policy”
The policy makes no mention of SOC2, GDPR, HIPAA, ISO certifications, or compliance with major data protection frameworks. The absence of compliance certifications creates high risk for enterprise use, especially given the 2019 date.
“No compliance certifications mentioned in the policy document”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai