# Gatekeeper — Contract Management (CLM)

Gatekeeper by Gatekeeper Hub Ltd holds a panel rating of 2.5/5 from 6 AI judges (category median 2.5/5), as of 2026-10-21. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Gatekeeper Hub Ltd (https://gatekeeperhq.com)
- Category: [Contract Management (CLM)](https://whats-best.ai/software/contract-management.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/contract-management/gatekeeper
- Alternatives: https://whats-best.ai/software/contract-management/gatekeeper/alternatives ([markdown](https://whats-best.ai/software/contract-management/gatekeeper/alternatives.md))
- Data as of: 2026-10-21 · evaluated 2026-10-21 · oldest source captured 2026-10-20

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Gatekeeper Hub Ltd
- Headquarters: Not stated on the vendor’s pages as of 20 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 20 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 20 Oct 2026

## The panel's verdict

Gatekeeper is a contract management platform whose scores peak at 6-7 on repository and obligations: judges credited extraction of the initial term, the auto-renewal trigger and the notice period, with renewal dates owned, automatic reminders and OCR full-text search. Negotiation and approval, and integration and exit, follow at 5-6, resting on approval routing driven by the delegated authority matrix, a documented RESTful API with webhooks and NetSuite, and an exit export of CSV data with native-format attachments within 30 days. Authoring and templates and AI extraction control sit at 4-5; the AI terms bar training and fine-tuning and require human review, but no AI provider is named, and the captured pages give different statements on data used to improve AI features. Sovereignty is the floor at 1-2: entities sit in Jersey, London, Delaware and Toronto, the DPA is governed by the law of England and Wales, the subprocessor list is on request only, and we found no public information on hosting location, though ISO 27001 and Irish-law SCCs are published. Pricing transparency sits at 1.

**Speaks for it:**
- Repository and obligations scored 6-7, the highest criterion, extracting the initial term, the auto-renewal trigger and the notice period, with renewal dates given owners and automatic reminders
- Approval routing follows the customer's delegated authority matrix, with single and parallel approvers, delegation, and every decision recorded in the card's history with its comments
- The documented RESTful API provides a per-tenant OpenAPI 3.0 specification, per-key read and write permissions, call logs, webhooks and a NetSuite connection
- The AI terms commit that input and output are never used to train or fine-tune models, that processing is transient, and that human review is required before relying on output
- Termination brings an export of CSV data with attachments in native format within 30 days of request, followed by deletion within 60 days

**Held against it:**
- Sovereignty scored 1-2, with contracting entities in Jersey, London, Delaware and Toronto, a DPA governed by the law of England and Wales, and no public information on hosting location
- No AI provider is named, the subprocessor list is available only on request, and the AI terms permit transferring input to countries where those providers operate
- The captured pages give different statements on data used to improve AI features — the AI terms bar use of content for training while the privacy policy says metadata, interaction logs and structured inputs may be used where permitted by law
- We found no public information on tracked-changes redlining, version comparison, a Word round-trip that keeps changes, or German-language and German-law templates; the only documented drafting action converts Word to PDF
- The documented exit export is CSV data with native-format attachments, and we found no public information on versions, approvals or audit trail being included

**Best for:**
- You need to police auto-renewals and notice periods across a large portfolio — obligation extraction with owners and reminders is the highest-scoring criterion at 6-7
- Your approvals must mirror a delegated authority matrix, with single, parallel and conditional approvals and every decision recorded in the card's history
- You want to build your own integrations — the RESTful API with a per-tenant OpenAPI 3.0 specification, scoped keys, call logs and webhooks is documented, with NetSuite named
- You want a touchless NDA workflow from request to signature

**Avoid if:**
- Your policy requires an EU contracting entity or a stated hosting location — the entities sit in Jersey, London, Delaware and Toronto, and we found no public information on hosting location
- You must know where contract text is processed before signing — the subprocessor list is available only on request, no AI provider is named, and the AI terms permit transferring input to countries where those providers operate
- Your negotiation cycle depends on tracked-changes redlining or version comparison — the only documented drafting action converts Word to PDF
- You need the exit export to carry document versions, approvals and the audit trail — the documented export is CSV data with native-format attachments

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The General Counsel | The Procurement Analyst | The Sales Ops Owner | The IT Integrator | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Drafting, templates & clause library | 2/5 | 2.5/5 | 2/5 | 2/5 | 2.5/5 | 2/5 |
| Negotiation, redlining & approval | 2.5/5 | 3/5 | 3/5 | 3/5 | 3/5 | 2.5/5 |
| Repository, deadlines & obligations | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 |
| AI extraction & review transparency | 2/5 | 2/5 | 2/5 | 2/5 | 2.5/5 | 2/5 |
| Integrations, signature & exit | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 2.5/5 |
| European sovereignty | 0.5/5 | 1/5 | 0.5/5 | 1/5 | 1/5 | 0.5/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2/5** |

### The judges

- **The General Counsel** (v1.0): Runs a three-lawyer legal team that negotiates every supplier and customer contract in Word with the other side's counsel. Wants approved clauses with fallbacks, redlines that survive the round-trip, and an approval on record for every deviation — not a sign-off by email.
- **The Procurement Analyst** (v1.0): Holds four hundred supplier contracts and the Kündigungsfristen nobody else remembers. Wants notice periods and auto-renewals modelled rather than typed into a note, reminders that escalate to a named owner, and a portfolio report that shows what can be cancelled this quarter.
- **The Sales Ops Owner** (v1.0): Owns the quote-to-signature path for a sales team that closes standard deals without legal. Wants contracts generated from the CRM record, approvals that route by discount and value, signature in the same flow, and a price she can put in next year's budget.
- **The IT Integrator** (v1.0): Connects the CLM to SAP, Microsoft 365 and the CRM, and will be the one migrating out of it. Wants a versioned API, SSO and SCIM, qualified signature where the law asks for it, and an export that brings back metadata, versions and audit trail — not a ZIP of PDFs.
- **The Data Protection Officer** (v1.0): Reads the subprocessor list before the feature page. Asks which model provider receives contract text, whether it is retained or used for training, where OCR runs, and whether the counterparties' personal data in every contract is covered by the DPA.
- **The Skeptic** (v1.0): Has seen "AI that reads your contracts" miss a notice period buried in an amendment. Reads for an extraction accuracy nobody states, "Word integration" that loses tracked changes, "never miss a renewal" with reminders to one inbox, and an export that leaves the metadata behind.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Audit report available: yes [S4]
- Audit trail: Every Agent action recorded with decisions, evidence and reasoning [S10]
- Breach notification hours: 72 [S4]
- Certifications: yes · yes [S10]
- Data centre certifications: yes [S4]
- Data encryption: Data remains within Gatekeeper's secure encrypted environment [S10]
- Data sale: no [S3]
- Dnt supported: yes [S3]
- DPA available: yes [S3]
- DPA available: Data Processing Agreement and EU Data Act Addendum offered in legal section [S10]
- DPA governing law: England · England and Wales [S4]
- Dta available: yes [S4]
- Encryption: AES256 · TLS [S4]
- EU transfer mechanisms: adequacy (European Commission) · EU SCCs · BCRs · EU-U.S. DPF certification [S3]
- External audit frequency: 1 [S4]
- Frameworks: Data Protection (Jersey) Law 2018 · GDPR · PIPEDA · US state privacy laws [S3]
- ISO 27001 certified: yes [S4]
- No data sale: no [S4]
- No sensitive data: no [S4]
- Scc governing law: Irish law [S4]
- Scc modules: yes · yes · yes [S4]
- Section: Security and compliance section present; compliance framed as provable [S1]
- Security center: yes [S1]
- Security center: Security Center page available [S11]
- SOC 2 GDPR: yes · yes [S6]
- Ssl encryption: yes [S3]
- Supervisory authorities: Irish DPC · ICO · FDPIC [S4]
- Swiss transfer mechanisms: adequacy (Swiss DPA) · EU SCCs · BCRs · Swiss-U.S. DPF certification [S3]
- UK EU representative: customer's own representative if named in their privacy policy · no [S4]
- UK transfer mechanisms: adequacy (ICO) · IDTA / UK SCCs · BCRs · UK Extension to EU-U.S. DPF [S3]
- US state laws covered: CCPA/CPRA · VCDPA · CPA · CTDPA · UCPA · MCDPA [S4]
- User consent warranty: Customer warrants user consents obtained for personal data processing and international transfer of Input to AI Provider countries [S12]

**Data**
- Customer owns input: customer [S12]
- Deletion days: 60 · 365 [S4]
- Export on termination: CSV with native-format attachments · 30 · yes [S2]
- Export tools: yes [S4]
- Input not used for ml: no [S12]
- No training or fine tuning: no · no [S12]
- Output usage rights: yes [S12]
- Personal data transfer: yes [S12]
- Retention policy: yes · yes [S3]
- Subject rights: access · rectification · erasure · restriction · objection · data_portability [S3]
- Subprocessor change notice days: 10 · 30 [S4]
- Transient processing: no · yes [S12]

**Hosting**
- Subprocessor list on request: yes · yes [S3]
- Transfer regions: Jersey · UK · Canada · North America [S3]

**Integrations**
- API architecture: RESTful · JSON:API [S13]
- API key disable toggle: yes [S13]
- API key permissions: yes [S13]
- API key read write: read-only · write [S13]
- API key revocation: yes · yes [S13]
- API logs: yes · Parameters · Payload · Response [S13]
- Custom data support: yes [S13]
- Esign workflow update: yes · yes [S8]
- Multiple API keys: yes [S13]
- Netsuite: yes [S8]
- Openapi spec: /api_docs.json · OpenAPI 3.0 · yes [S13]
- Postman collection: yes · via Account Director [S13]
- Related agents: Identifies, classifies, prioritises and routes every contract as it is submitted · Generates structured renewal briefs with performance assessments and market analysis [S10]
- Tenant specific docs: append /api_docs to tenant URL · yes [S13]
- Webhooks related: yes [S13]

**Legal**
- AI terms precedence: yes [S12]
- AI terms scope: AI Terms are incorporated into the Master Subscription Agreement and apply to any AI Functionality included in the Services [S12]
- Customer indemnity content: claims resulting from Gatekeeper provided Input · yes [S12]
- Data controller: Gatekeeper Ltd · Gatekeeper UK Group Ltd [S3]
- Documents: Privacy Policy · Terms of Service · eSign EULA · Legality of E-signatures · Data Processing Agreement · EU Data Act Addendum [S1]
- DPA available: Data Processing Agreement and EU Data Act Addendum published on site [S11]
- Entities: Gatekeeper Ltd (Jersey) · Gatekeeper UK Group Ltd (London) · Gatekeeper US LLC (Austin) · Gatekeeper Canada Inc (Toronto) [S3]
- Entities: Gatekeeper Ltd · Gatekeeper Canada Inc. · Gatekeeper US LLC · Gatekeeper UK Group Ltd [S2]
- Entities: Gatekeeper Ltd (Jersey) · Gatekeeper UK Group Ltd (London) · Gatekeeper US LLC (Delaware) · Gatekeeper Canada Inc (Toronto) [S4]
- EU representative: Sam Pavitt [S3]
- Insurance: Worldwide · 2000000 · 5000000 · 5000000 · 2000000 [S2]
- Jersey law reference: yes [S4]
- No model training by gatekeeper: no · no [S12]
- Policy updated: 2025-06-06 [S3]
- Suspension nonpayment: 30 [S2]
- Term duration: yes [S12]
- Termination for outage refund: Chronic Service Outage · yes · 30 [S2]
- Termination with cause: 30 · 10 [S2]
- Trademark: GATEKEEPER · 2015-2026 [S1]
- Trademark: 2015-2026 · yes [S3]
- Trademark: 2015-2026 · yes [S8]
- Trademark: Gatekeeper is a registered trademark, copyright 2015-2026 [S10]

**Pricing**
- Fees fixed: yes [S2]
- Implementation not included: Implementation · Customisation · Configuration [S2]
- Renewal terms: list price at start of Renewal Term · yes · 1 year · 60 [S2]
- VAT excluded: no [S2]

**Product**
- Agent handoff: yes [S6]
- Agent name: Contract Clause Review Agent [S6]
- Agents auditable: yes · yes · yes [S1]
- Agents count: 50 [S1]
- AI agents: Gatekeeper Agents handle routing tasks, extract key data, and write it to a unified record [S8]
- AI contract management guide: gated guide · responsible AI contract management · yes [S11]
- AI disclosure required: yes [S12]
- AI framework reviews: SOC 2 · DORA · ESG [S1]
- AI functionality capabilities: AI Functionality includes data analysis, pattern recognition, natural language processing, prediction, and automated decision support [S12]
- AI training use: Personal data such as metadata, interaction logs and structured inputs may be used to improve AI-powered features where permitted by law [S3]
- Alerting: Extracted obligations trigger alerts before deadlines [S10]
- Approval decision types: Approve or Reject [S7]
- Approval hierarchy config: Configurable phases, forms, conditional routing, timers, escalations driven by delegated authority matrix [S8]
- Approval history logging: yes [S7]
- Approval transition routing: yes [S7]
- Approval types: Single · Parallel [S7]
- Approver definition sources: workflow groups · specific users · form fields [S7]
- Audit time saved: 30 [S1]
- Audit trail: yes · yes [S6]
- Auto renewal handling: Captures initial term, auto-renewal trigger and notice period [S10]
- Automation via agents: Gatekeeper Agents, contact Account Director [S7]
- Balanced scorecards: yes [S1]
- Benchmarking use: yes [S2]
- Best practice workflows: Best-practice workflows with centralised intake, vendor risk assessment, parallel/sequential approvals [S8]
- Bulk import capability: Bulk import allows adding and updating contract data at scale via spreadsheet upload [S14]
- Clause library: yes [S6]
- Clause library: Clause library with guard-railed templates [S10]
- Clause list: Indemnity · Limitation of liability · Termination for convenience · Force majeure · Data protection · Intellectual property · Confidentiality · Insurance · Governing law and jurisdiction · Term and renewal [S6]
- Conditional approval rules: yes [S7]
- Conditional parallel modes: Simple · Conditional [S7]
- Conditional rule field sources: Workflow Group · User · Internal Owner · Dropdown · Multi-Select Dropdown [S7]
- Configurable summary length: yes [S6]
- Configuration included: yes · no [S2]
- Continuous monitoring: yes · yes [S1]
- Contract management: yes [S1]
- Contract renewal review: contract renewal review with alerts [S8]
- Customer savings funding circle: Funding Circle terminated contracts worth $1.3m [S1]
- Decision reversal roles: Workflow Administrator · Local Workflow Administrator · Local Workflow Cards Manager [S7]
- Due diligence speed: 90 [S1]
- Employee portal: yes [S1]
- Esg due diligence: ESG due diligence checks [S8]
- Esign terms: https://www.gatekeeperhq.com/esign-eula [S2]
- Esign workflow: automated eSign workflow [S8]
- Executive review reduction compsource: 20 · 95 [S1]
- Existing contracts support: Agent works on existing contracts already in Gatekeeper [S10]
- Export CSV all pages editable fields: CSV \| All Pages / Current Page exports include all bulk-import-updatable fields; This View may include non-editable fields such as Created On [S14]
- Export options: CSV \| All Pages exports all exportable data from entire contract list [S14]
- Export options current page: CSV \| Current Page exports exportable data from current page [S14]
- Export options view all: CSV \| This View \| All Data exports entire list with filters and additional columns [S14]
- Export options view page: CSV \| This View \| Current Page exports current page with filters and additional columns [S14]
- Extraction workflow: Extracted obligations are added to the Gatekeeper contract record for tracking and alerting [S10]
- Finance capabilities: spend visibility · renewal oversight · audit-ready evidence [S8]
- Form visibility control: yes · yes [S7]
- Format support: yes [S6]
- Gatekeeper chat: Gatekeeper Chat answers plain-language questions over contract and vendor repository [S9]
- Global search case insensitive: yes [S9]
- Global search covered areas: contract metadata and custom fields · vendor metadata and custom fields · document text via OCR · file names · file content type · category names · team names · entity names [S9]
- Global search fuzzy spelling: sometimes [S9]
- Global search location: top of tenant, next to Support Centre [S9]
- Global search results display: results pop-up shows item type and confidence rating [S9]
- Global search scope: searches metadata, custom field values, object names, and document contents via OCR [S9]
- Global search sensitive fields excluded: yes [S9]
- Global search type filter: yes [S9]
- Group membership sync: yes [S7]
- Guide topics: AI contract management across the organisation, risks of proprietary AI LegalTech CLM, responsible corporate AI use, privacy/security/ethical AI practices [S11]
- Human review required: yes [S12]
- Implementation remote: remote [S2]
- Import blank cell clears field: Blank cell in reimport clears the existing field data [S14]

**Support**
- Channel requirement: yes · https://www.gatekeeperhq.com/support [S2]
- Marketing opt out: yes [S3]

58 more facts on the canonical page: https://whats-best.ai/software/contract-management/gatekeeper

## Questions

### Is Gatekeeper European?

Not determined: the vendor’s pages as captured do not say where Gatekeeper is based.

### Where does Gatekeeper store data?

Not stated on the vendor’s pages as of 20 Oct 2026.

### Does Gatekeeper have a free plan?

Not stated on the vendor’s pages as of 20 Oct 2026.

### What are the best alternatives to Gatekeeper?

As of 21 Oct 2026, the panel rates [Tomorro (2.5/5)](https://whats-best.ai/software/contract-management/tomorro), [Precisely (2.5/5)](https://whats-best.ai/software/contract-management/precisely) and [fynk (2.5/5)](https://whats-best.ai/software/contract-management/fynk) highest among the other 19 Contract Management (CLM) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Precisely](https://whats-best.ai/software/contract-management/precisely) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Gatekeeper alternatives](https://whats-best.ai/software/contract-management/gatekeeper/alternatives).

## What this page leaves out

- 30 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 8 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.

## Sources

- [S1] Vendor page: https://gatekeeperhq.com (checked 2026-10-20)
- [S2] Terms of service — found from the homepage: https://www.gatekeeperhq.com/terms_of_service (checked 2026-10-20)
- [S3] Privacy policy — found from the homepage: https://www.gatekeeperhq.com/privacy_policy-1 (checked 2026-10-20)
- [S4] Data processing agreement (dpa) — found from the homepage: https://www.gatekeeperhq.com/dpa (checked 2026-10-20)
- [S5] Drafting, templates & clause library — found from sitemap: https://knowledge.gatekeeperhq.com/en/docs/creating-a-contract-template (checked 2026-10-20)
- [S6] Drafting, templates & clause library — found from sitemap: https://www.gatekeeperhq.com/ai-agents/contract-clause-review-agent (checked 2026-10-20)
- [S7] Negotiation, redlining & approval — found from sitemap: https://knowledge.gatekeeperhq.com/en/docs/workflow-phase-approvals (checked 2026-10-20)
- [S8] Negotiation, redlining & approval — found from sitemap: https://www.gatekeeperhq.com/why-gatekeeper/workflow-automation-engine (checked 2026-10-20)
- [S9] Repository, deadlines & obligations — found from sitemap: https://knowledge.gatekeeperhq.com/en/docs/global-search (checked 2026-10-20)
- [S10] Repository, deadlines & obligations — found from sitemap: https://www.gatekeeperhq.com/ai-agents/contract-obligation-extraction-agent (checked 2026-10-20)
- [S11] AI extraction & review transparency — found from sitemap: https://www.gatekeeperhq.com/responsible-ai-contract-management (checked 2026-10-20)
- [S12] AI extraction & review transparency — found from sitemap: https://www.gatekeeperhq.com/ai-terms (checked 2026-10-20)
- [S13] Integrations, signature & exit — found from sitemap: https://knowledge.gatekeeperhq.com/en/docs/configuring-api (checked 2026-10-20)
- [S14] Integrations, signature & exit — found from sitemap: https://knowledge.gatekeeperhq.com/en/docs/contract-data-bulk-import-export (checked 2026-10-20)

---

Cite as: whats-best.ai, "Gatekeeper — Contract Management (CLM)", AI panel analysis, as of 2026-10-21. https://whats-best.ai/software/contract-management/gatekeeper

Corrections: https://whats-best.ai/correct/868?target=page