Ironclad
Ironclad is a contract lifecycle management platform that streamlines the creation, execution, and management of contracts, enhancing collaboration and compliance for legal teams.
Ironclad is an AI-powered contract lifecycle management (CLM) platform that automates the creation, review, negotiation, execution, and analysis of contracts, delivering faster deals, reduced risk, and measurable value through centralized data and intelligent workflows.[1][2] Key features include multi-agent AI for drafting, redlining, and risk analysis; no-code Workflow Designer for custom automations; native eSignature with approval tracking; advanced analytics for performance insights; and seamless integrations with CRMs like Salesforce, CPQ tools, and procurement systems such as Coupa.[1][3][4]
It targets legal teams, sales, procurement, and enterprise departments handling high-volume contracts, enabling use cases like supplier obligation management, entity profiling, and recapturing lost contract value across sales agreements and vendor relationships.[2][4] What sets Ironclad apart is its comprehensive, all-in-one approach that eliminates silos with unified dashboards, custom AI data extraction, and high adoption rates—up to 71% in 71 days—while ensuring compliance with standards like GDPR and HIPAA, without needing separate tools.[1][5][2]
Sources
- [1] https://ironcladapp.com/product/ai-based-contract-management
- [2] https://ironcladapp.com
- [3] https://www.g2.com/products/ironclad/features
- [4] https://www.prnewswire.com/news-releases/ironclad-launches-new-capabilities-to-help-enterprises-recapture-millions-in-lost-contract-value-302425923.html
- [5] https://signeasy.com/blog/business/ironclad-reviews
The ToS mentions AI-generated outputs and disclaims accuracy but does not explicitly state whether user data trains the
The ToS mentions AI-generated outputs and disclaims accuracy but does not explicitly state whether user data trains the
Moderate risk. Suitable for internal data but avoid confidential information.
The ToS mentions AI-generated outputs and disclaims accuracy but does not explicitly state whether user data trains the AI model. Language about processing Customer Data 'as necessary to perform' the Service is vague on training use. No clear opt-out or no-training-by-default policy is stated.
“[ToS] 'YOU ACKNOWLEDGE THAT: (1) YOU ARE SOLELY RESPONSIBLE FOR ANY LIABILITY ARISING FROM THE USE OR RELIANCE ON AI-GENERATED OUTPUTS PROVIDED BY THE SERVICE; AND (2) DUE TO THE NATURE OF ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING INFORMATION AI-GENERATED INFORMATION PROVIDED BY THE SERVICE MAY BE INCORRECT OR INACCURATE.'”
The ToS grants Ironclad a limited, non-exclusive, non-sublicensable license to access and use Customer Data 'as necessary to perform' the Service. However, the 'User Comments' section grants broad, unrestricted rights to edit, copy, publish, and distribute submissions 'without restriction,' creating ambiguity about the scope of content licensing.
“[ToS] 'You authorize Ironclad to access, process, and use the Customer Data as necessary to perform and fulfill its obligations hereunder, including to provide the Service to you.' AND 'you agree that we may, at any time, without restriction, edit, copy, publish, distribute, translate, and otherwise use in any medium any Comments that you forward to us.'”
The ToS states data is processed 'in accordance with the Ironclad Privacy Policy' but does not detail third-party sharing in the ToS itself. The Privacy Policy is referenced but not provided. The ToS mentions sharing with law enforcement and government agencies under legal process, but lacks detail on routine sub-processor sharing or DPA requirements.
“[ToS] 'You and your Authorized Users acknowledge that Ironclad may process Customer Data in accordance with the Ironclad Privacy Policy.' AND 'we may access, preserve, or share any of your information when we believe in good faith that such sharing is reasonably necessary to investigate, prevent, or take action regarding possible illegal activities or to comply with legal process.'”
The ToS does not specify data retention periods, deletion timelines, or automatic purge policies. It references the Privacy Policy for data handling but provides no explicit retention or deletion commitments in the ToS itself. Backup retention and account termination cleanup are not addressed.
“[ToS] 'You and your Authorized Users acknowledge that Ironclad may process Customer Data in accordance with the Ironclad Privacy Policy.' - Not found in documents for specific retention/deletion terms.”
The ToS is ambiguous on output ownership. It states the user grants Ironclad rights to access and process Customer Data 'as necessary to perform' the Service, but does not explicitly state who owns AI-generated outputs. The broad 'Comments' license clause creates further ambiguity about vendor rights to generated content.
“[ToS] 'You authorize Ironclad to access, process, and use the Customer Data as necessary to perform and fulfill its obligations hereunder, including to provide the Service to you.' - Ownership of outputs not explicitly addressed.”
The ToS and provided documents contain no mention of SOC 2, ISO 27001, GDPR compliance, HIPAA, or other security certifications. No trust page, security documentation, or DPA is referenced or provided. Compliance certifications are entirely absent from the available materials.
“[ToS] Not found in documents - No security certifications, trust page, or DPA mentioned.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai