whats-best.ai

Contract Management (CLM)

Ironclad

Rest of world Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Ironclad, Inc. · ironcladapp.com

Report an error on this page Is this your product? →

Link to this page

Ironclad: AI-assisted analysis on whats-best.ai Ironclad: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Ironclad at a glance

Vendor
Ironclad, Inc.
Headquarters
Not stated on the vendor’s pages as of 13 Oct 2026
Data hosting
Default not stated; pages mention United States source, captured 13 Oct 2026
Free plan
Not stated on the vendor’s pages as of 13 Oct 2026
Panel verdict
The AI panel rates Ironclad 2.5/5, the mean of 6 judges. Ironclad, a digital contracting platform from Ironclad, Inc. how scores are made
As of
Vendor pages captured 1 Oct 2026 to 13 Oct 2026; evaluated by the panel 15 Oct 2026. all sources

Ironclad alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The panel's verdict

Ironclad, a digital contracting platform from Ironclad, Inc. of San Francisco, is strongest on authoring and templates at 6-7 and negotiation and approval at 6, with a global clause library of pre-approved fallbacks, per-clause permissions, playbook flagging of non-standard terms, contract generation from Salesforce-pre-filled forms, a Word add-in for review and automatic routing of deviations to stakeholders. It is weakest on repository and obligations at 3-4, where obligations management appears only as a demo-video title and the judges found no public information on modelled notice periods, renewal dates or escalating reminders, and on sovereignty at 3, where the privacy policy states information is transferred to, processed and stored in the United States, or for certain customers, the European Union, and the judges found no public information on a subprocessor list. Spread is narrow: AI extraction control and integration and exit cluster at 4-5, and the captured pricing page shows no figures, pricing transparency 0-1.

Report an error

Speaks for it

  • Global clause library with pre-approved fallback language and permissions controlling who can view, insert or edit specific clauses.
  • Playbooks flag non-standard terms in real time and route them automatically to the right stakeholders for approval.
  • Contracts generate from launch forms pre-filled with Salesforce records, with signature status updated back in Salesforce.
  • Public responsible-AI page documents permission controls per AI feature, scoped authentication, anonymization of PII, credit cards, PHI and select clauses, and prompts to accept or reject suggestions.
  • Documented CLM and ClickWrap APIs and a native, AppExchange-approved Salesforce integration with multi-org, record and workflow sync.

Report an error

Held against it

  • Repository and obligations scored 3-4: obligations management appears only as the title of a demo video, and the judges found no public information on modelled notice periods, renewal dates or escalating reminders.
  • Sovereignty scored 3: the privacy policy states information is transferred to, processed and stored in the United States, or for certain customers, the European Union, under Ironclad, Inc. of San Francisco, and the judges found no public information on a subprocessor list.
  • We found no commitment that customer contracts are excluded from AI training — the responsible-AI page describes training on curated public and proprietary data — and the judges found no public information naming the model provider or where AI processing runs.
  • We found no public information on a documented bulk export of documents with their metadata, versions and audit trail; the only removal path shown is account termination via support@ironcladhq.com.
  • The captured pricing page names the contract lifecycle management, AI assistant and eSignature solutions but shows no price, pricing basis or tier limits — pricing transparency scored 0-1.

Report an error

Best for

  • You need governed drafting at scale, with a permissioned clause library of pre-approved fallbacks and playbooks that flag non-standard wording — the highest-scoring criterion, authoring and templates at 6-7.
  • Your sales teams live in Salesforce and need contracts generated from CRM records, with approval and signature status updated back in Salesforce.
  • You want AI-assisted review under documented human oversight — scoped authentication, anonymization of PII, credit cards, PHI and select clauses, and prompts to accept or reject suggestions on a public responsible-AI page.
  • Your legal team negotiates in Word and wants non-standard terms routed automatically to the right stakeholders for approval.

Report an error

Avoid if

  • You need renewal dates, notice periods and escalating reminders modelled in the repository — the captured pages show obligations management only as the title of a demo video.
  • Your compliance review requires EU processing as the default — the privacy policy states transfer, processing and storage in the United States, or for certain customers, the European Union, under a San Francisco entity.
  • You must be able to exit with a documented bulk export of documents, metadata, versions and audit trail — the removal path shown is account termination via support@ironcladhq.com.

Report an error

The scores

Panel median The median of the judges’ scores per criterion. Each label opens its reasoning below.

Drafting, templates & clause library

Show reasoning
How this is scored

Creating a contract without starting from an old one: templates with variables and conditional clauses, an approved clause library, self-service generation for business teams, and support for German-language and German-law templates.

0 — No drafting at all; contracts are uploaded as finished files.

3 — Templates with simple placeholders, but no conditional logic, no clause library, and every draft still edited by hand by legal.

5 — Templates with variables and conditional clauses, a clause library with approved fallbacks, a questionnaire or form that lets business users generate standard contracts, and German-language templates supported.

8 — Template and clause versioning with an owner per clause, multilingual templates from one source, generation from CRM or procurement records, playbook rules that flag deviations from approved wording, and template use reported.

10 — Drafting is governed end to end: every clause traceable to its approved version and owner, deviations from the playbook visible on every draft, bilingual German–English contracts generated side by side, and templates exportable in an open format.

Report an error

The General Counsel

A no-code workflow designer with conditional logic, a global clause library of pre-approved language with fallbacks grouped by contract type and risk profile, playbook rules that flag non-standard wording, contract generation from Salesforce records, and clause usage reported — that is most of what I require before my lawyers let go of an old file. We found no public information on clause versioning with a named owner, multilingual or German-language templates from one source, or template export in an open format. 2 5 6 13 6

Report an error

The Procurement Analyst

The Global Clause Library with pre-approved fallbacks, permissions over who may view, insert or edit language, and playbook rules that flag non-standard wording and route it to stakeholders are well evidenced, and contracts can be generated from forms pre-filled with Salesforce data. We found no public information on clause versioning with a named owner, multilingual or German-law templates, or templates exportable in an open format. 2 5 6 13 6

Report an error

The Sales Ops Owner

The Global Clause Library with pre-approved fallbacks, grouped and permissioned clauses, a no-code designer with conditional logic, and contract generation from pre-filled Salesforce launch forms covers the path from CRM record to standard draft, with playbooks flagging non-standard terms and clause usage patterns captured. We found no public information on German-language or multilingual templates or a version owner per clause, which keeps it below the fully governed end. 2 5 13 6

Report an error

The IT Integrator

The Global Clause Library comes with pre-approved fallback language, permissions over who can view, insert or edit a clause, and playbooks that flag non-standard wording and swap in preferred language in one click — that is real drafting governance, not just a template folder. Generating a contract from a pre-filled launch form fed by Salesforce records gives business teams a form-based path in. I found no public information on template variables with conditional clauses, clause-level versioning with named owners, or German-language and German-law templates. 5 6 13 6

Report an error

The Data Protection Officer

A global clause library with pre-approved fallbacks, clause grouping and per-clause permissions is documented, and contracts can be generated from launch forms pre-filled from Salesforce records with playbook rules flagging non-standard terms and clause usage captured. We found no public information on clause versioning with a named owner, on conditional clause logic within templates, or on German-language or multilingual templates. 2 5 6 13 6

Report an error

The Skeptic

There is a genuine clause library with pre-approved fallback language, permissions over who may view or insert specific wording, and playbooks that flag deviations plus one-click clause swaps; creating contracts from forms pre-filled with Salesforce records is documented. But we found no public information on German-language or German-law templates or multilingual templates from one source, and nothing on clause versioning with an owner per clause. 2 5 6 13 6

Report an error

Negotiation, redlining & approval

Show reasoning
How this is scored

Getting from draft to agreed text with a counterparty and through internal sign-off: redlining in Word and in the browser, external collaboration, version comparison, approval workflows, and a record of who approved which version.

0 — No negotiation support; versions are emailed back and forth outside the system.

3 — Comments and a version list inside the system, but no redline comparison, no Word round-trip, and approvals handled by email.

5 — Redlining with tracked changes, a Word add-in or round-trip that keeps changes, counterparty access without a licence, version comparison, and configurable approval steps by contract type or value.

8 — Conditional approval routing (value, deviation from playbook, risk), parallel and sequential approvers with delegation, an audit trail of every change and approval per version, and internal comments kept separate from what the counterparty sees.

10 — Negotiation is an auditable record: every concession traceable to who proposed and who approved it, approval rules an auditor or the board can read, negotiation duration reported per contract type, and the full history exportable with the signed version.

Report an error

The General Counsel

There is a Word add-in for review, redline suggestions driven by the playbook with prompts to accept or reject, pre-approved fallbacks so the whole team proposes the same alternatives, embedded internal comments alongside counterparty document sharing, and automatic routing of non-standard terms to the right stakeholders. 6 7 8 11 13 6

Report an error

The Procurement Analyst

One-click clause swaps, redline suggestion visualizations, a Word add-in for review, counterparty document sharing with embedded internal comments, and approval workflows that automatically route deviations are all evidenced. We found no public information on version comparison as such, an audit trail showing who approved which version, parallel or delegated approvers, or negotiation duration reporting. 2 6 8 13 6

Report an error

The Sales Ops Owner

Word round-trip via an add-in, counterparty document sharing, embedded internal comments kept separate from the counterparty view, and automatic routing of non-standard terms to stakeholders are all evidenced, so a deal can be negotiated and approved inside the flow. Routing is evidenced by playbook deviation rather than by deal value or discount, and we found no public information on an audit trail of every change and approval per version or on parallel approvers with delegation. 2 6 7 13 6

Report an error

The IT Integrator

A Word add-in for round-trip review, embedded internal comments alongside counterparty document sharing, a no-code designer for approval workflows, automated routing of non-standard terms to the right stakeholders, and full redline suggestion visualizations built from the playbooks cover the daily negotiation loop. What I found no public information on is version-to-version comparison, an audit trail of who approved which version, and negotiation duration reporting — the things that make a negotiation an auditable record rather than just a smoother one. 2 6 8 11 13

Report an error

The Data Protection Officer

Contract review inside Word via the add-in, counterparty document sharing, embedded internal comments, and non-standard terms automatically routed to the right stakeholders for approval are all stated. We found no public information on version comparison, on parallel and sequential approvers with delegation, or on an audit trail showing who approved which version. 2 6 8 13 6

Report an error

The Skeptic

Redlining is evidenced through full redline suggestion visualizations in AI Assist, fallback language keeping team redlines consistent, a Word add-in for contract review, and counterparty document sharing with embedded internal comments; non-standard terms route automatically to stakeholders for approval. We found no public information on an audit trail showing who approved which version, on version comparison as such, or on parallel approvers with delegation — and nothing confirming the Word round-trip preserves tracked changes. 2 6 8 11 13 6

Report an error

Repository, deadlines & obligations

Show reasoning
How this is scored

Knowing what has been signed and what it requires: a searchable repository with metadata, notice periods and renewal dates captured and reminded, obligations tracked to an owner, access rights by department, and reporting on the portfolio.

0 — A file store with folders; no metadata, no dates and no reminders.

3 — Metadata fields and an end date with an email reminder, but notice periods and auto-renewal are not modelled and reminders go to one person.

5 — Notice periods, renewal terms and end dates modelled as fields, reminders with escalation to named owners, full-text search including scanned contracts (OCR), and access rights per department or contract type.

8 — Obligations and milestones tracked with owners and status, contract hierarchies (framework, amendments, orders) linked, reminders logged so a missed deadline can be traced, and portfolio reports on renewals, value and counterparties.

10 — The repository is a system of record a company can be audited on: every deadline derived from a cited clause, reminders and their acknowledgements logged, retention and deletion rules per contract type, and a portfolio view a CFO can use for commitments and cancellations.

Report an error

The General Counsel

The repository is searchable with advanced search, Smart Import pulls two to three times more contract data from legacy files, and metadata flows into Salesforce reports. Obligations appear only as the title of a demo video, and we found no public information on notice periods and renewal terms as modelled fields, reminders with escalation to named owners, OCR of scanned contracts, or access rights per department. 2 9 10 13 10

Report an error

The Procurement Analyst

A central repository with advanced search is evidenced, Smart Import is described as extracting considerably more contract data from legacy files, and obligations management and an Insights module are named. We found no public information on notice periods, renewal dates or auto-renewal being modelled, reminders with escalation to a named owner, full-text search of scanned contracts, access rights per department, or portfolio reporting on cancellable commitments — the deadline machinery I hold four hundred contracts for is simply not visible. 1 2 9 10 10

Report an error

The Sales Ops Owner

A central searchable repository with metadata pulled in by Smart Import is evidenced, alongside an obligations management video and an Insights module by name only. We found no public information on notice periods and renewal dates modelled as fields, reminders with escalation to named owners, OCR on scanned contracts, or access rights per department — the deadline machinery my team would live or die by is not shown. 1 2 9 10

Report an error

The IT Integrator

The repository is searchable, Smart Import captures contract data on upload, and metadata flows into Salesforce reports — the bones of a repository exist. But deadlines are thin: obligations management appears only as a video title with no detail, and I found no public information on notice periods, renewal or end-date modelling, reminders with escalation, per-department access rights, or contract hierarchies. 2 9 10 13

Report an error

The Data Protection Officer

A central, searchable repository with advanced search is confirmed, and metadata is captured on legacy import, but the captured pages only show a video title for obligations management with no detail on owners, status or deadlines. We found no public information on notice-period and renewal modelling, reminder escalation, full-text search of scanned contracts, department-level access rights, or portfolio reporting on renewals and counterparties. 2 9 10

Report an error

The Skeptic

A central repository with advanced search is confirmed, Smart Import claims two to three times more contract data from legacy uploads with metadata verification, and obligations management appears as the title of a demo video. But we found no public information that notice periods, renewal terms or end dates are modelled as fields, that reminders escalate to named owners, that search covers scanned contracts, or that access rights are set per department — the deadlines story is a video title, not a stated capability. 2 9 10 11

Report an error

AI extraction & review transparency

Show reasoning
How this is scored

Whether the AI that extracts dates and clauses or reviews a draft is disclosed, verifiable and controllable: named model provider and processing location, no training on customer contracts, extracted values shown with their source passage, and features the customer can switch off. A product without AI features is judged on stating so.

0 — AI extraction or review is marketed with no statement of the model, where it runs, or what happens to the contract text.

3 — AI features described as a benefit with a general privacy assurance, but no model provider named, no statement on training, and extracted values shown without their source.

5 — The model provider or subprocessor named, a stated commitment not to train on customer contracts, extracted values linked to the source passage for confirmation, and AI features that can be disabled per account.

8 — AI processing available within the EU, each AI feature documented with its purpose and inputs, accuracy or confidence shown per extracted field, review results traceable to the playbook rule that triggered them, and an EU AI Act position published.

10 — AI is an accountable assistant: customer choice of model or EU-only processing, no retention of contract text by the model provider stated contractually, every AI-suggested value logged with who confirmed or corrected it, and AI off by default until the customer enables it.

Report an error

The General Counsel

The AI features are named — Smart Import, AI Assist, AI Playbooks, Jurist — with a public responsible-AI page, permission controls, anonymisation of sensitive data types, scoped authentication and prompts to accept or reject suggestions. But no model provider is named as the processor, no commitment is published that customer contracts are not used for training, and processing defaults to the United States with the European Union offered only for certain customers. 3 10 11

Report an error

The Procurement Analyst

A public responsible AI policy documents oversight — metadata verification in Smart Import, accept-or-reject prompts, full redline visualizations — plus scoped authentication, permission controls on every AI feature and anonymization of sensitive clauses. We found no public information naming the model provider and processing location for the AI features, a commitment not to train on customer contracts, source-passage linkage for extracted values, or an EU AI Act position. 3 11

Report an error

The Sales Ops Owner

The public responsible-AI page documents oversight mechanisms — metadata verification on import, accept-or-reject prompts, full redline visualizations from playbooks — plus scoped authentication, permission controls per AI feature, anonymization options, and an OpenAI collaboration is named. We found no public information on a commitment not to train on customer contracts, on where AI processing runs or an EU-only option, or on extracted values linked to their source passage. 10 11

Report an error

The IT Integrator

There is a public responsible-AI policy with permission controls per AI feature, scoped authentication limiting what the AI can read, anonymization of PII, credit cards, PHI and select clauses, and verification prompts for suggested changes and imported metadata — the oversight story is genuinely there. But the page names OpenAI only as a collaborator rather than as the model provider, states the AI is trained on curated public and proprietary data without saying customer contracts are excluded, and I found no public information on where the AI processing runs or on per-field confidence and an EU AI Act position. 3 10 11

Report an error

The Data Protection Officer

The AI features are backed by a public responsible-AI page evidencing anonymization of personal data and select clauses before processing, scoped user authentication, and human prompts to accept or reject suggestions. My core questions go unanswered: we found no public information naming the model provider that receives contract text, where that processing runs, or whether contract text is used for training — the training statement describes curated public and proprietary data, which is not a commitment about customer contracts, and the OpenAI reference reads as a collaboration rather than a named processing provider; nor is an EU AI Act position or a per-account off switch documented. 2 10 11

Report an error

The Skeptic

A public responsible-AI page names each AI feature, gives permission controls over them, scoped authentication so AI only leverages data the user can access, anonymization of PII and selected clauses, and oversight mechanisms including metadata verification and prompts to accept or reject suggestions, with redlines traceable to predefined playbooks. But OpenAI appears only as a collaborator rather than a named processing provider, AI processing location is unstated, and we found no commitment that customer contracts are excluded from training — the pages say models are trained on "curated public and proprietary data" without saying whose proprietary data, and no accuracy or confidence per field and no EU AI Act position appear. 3 10 11

Report an error

Integrations, signature & exit

Show reasoning
How this is scored

How contracts connect to the rest of the company and leave it again: CRM, procurement and ERP integration, e-signature (and which eIDAS level), SSO, an API, and a documented export of documents together with their metadata, versions and audit trail.

0 — No integrations, no API and no stated export; contracts can only be downloaded one by one.

3 — One CRM or storage integration and a bulk download of files, but metadata, versions and audit trail stay behind.

5 — A documented API, integrations with named CRM and storage systems, e-signature integrated with the level stated (simple, advanced or qualified), SSO, and a bulk export of documents with their metadata.

8 — Maintained integrations with systems common in DACH (SAP, Microsoft 365, Salesforce, DATEV-connected or procurement tools), qualified electronic signature available, webhooks, SCIM, and an export that includes versions, approvals and audit trail in an open format.

10 — Exit is designed in: a versioned API with a deprecation policy, a documented migration path in and out with the format stated, deletion after contract end confirmed, and the full repository — files, metadata, obligations and history — handed back without a professional-services fee.

Report an error

The General Counsel

Documented CLM and ClickWrap APIs, an MCP server and a ChatGPT connector, a native multi-org Salesforce integration with record and workflow sync, and named links to Coupa, HelloSign, Box and Ramp. The electronic signature level is not stated, and we found no public information on SSO, webhooks, SCIM, or a documented export that takes documents out together with their metadata, versions and audit trail. 2 12 13 1

Report an error

The Procurement Analyst

A documented API, a deep native Salesforce integration with multi-org support and metadata into reports, and named connections including Coupa, Box and Word are evidenced, alongside an Ironclad Signature integration with Salesforce. We found no public information on the legal level of the electronic signature, single sign-on, webhooks or SCIM, or a documented export of documents together with their metadata, versions and audit trail — and the privacy policy notes data may remain in archives after removal. 2 7 8 12 13 1

Report an error

The Sales Ops Owner

A documented API for CLM and ClickWrap, a native AppExchange-approved Salesforce integration with multi-org, record and workflow sync, plus Coupa, Box, Ramp and Microsoft Word, and Ironclad Signature with signature status pushed into Salesforce give me contracts generated and signed in the same flow. We found no public information on which eIDAS level the signature carries, on SSO, webhooks or SCIM, and exit appears to be account termination via a support email rather than a documented export of documents with their metadata, versions and audit trail. 2 3 12 13

Report an error

The IT Integrator

The documented CLM and ClickWrap APIs, an AppExchange-approved Salesforce integration with multi-org support, record sync and metadata in Salesforce reports, plus Coupa, Box, Ramp, a Word add-in and an MCP server — the connective tissue is real and deeper than most. For my world it stops there: Ironclad Signature exists as a solution but I found no public information on its eIDAS level, and equally none on SSO, SCIM, webhooks, a versioned API with a deprecation policy, or — the part that decides a migration — a documented export of documents with their metadata, versions and audit trail; the privacy policy offers only account termination and archiving after removal. 2 3 12 13 1

Report an error

The Data Protection Officer

A documented API, named integrations with Salesforce, Box, Coupa and others, and an eSignature solution with Salesforce integration are confirmed. The electronic signature's legal level is not stated, and we found no public information on single sign-on, webhooks, or a documented bulk export of documents with their metadata, versions and audit trail — the only removal path shown is terminating an account by emailing support. 2 3 12 13

Report an error

The Skeptic

A documented API, a native Salesforce integration that passed Salesforce's own security review with record sync, workflow sync, multi-org support and metadata into Salesforce reports, plus Coupa, Box, HelloSign and an Ironclad Signature product, are all evidenced. We found no public information on SSO, webhooks or the eIDAS level of the signature, and the only exit rights stated are privacy-policy personal-data rights — deletion by emailing support and transfer to a third-party provider — with no documented bulk export of documents together with metadata, versions and audit trail. 2 3 12 13 1

Report an error

European sovereignty panel opinion

Show reasoning
How this is scored

Who the contracting entity is, where contracts and their extracted data are hosted, and who the subprocessors are — including the AI and OCR providers the text is passed to. Independently sourced by the sovereignty pipeline; weighted with care here because a contract repository holds a company's most confidential commitments and those of its counterparties.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and AI processing of unclear location.

3 — EU hosting offered as an option while the contracting entity is non-EU, or the subprocessor list is absent, or AI and OCR processing run outside the EU without saying so.

5 — EU hosting as standard and an EU contracting entity, but parts of the chain — AI models, OCR, email delivery, support — are non-EU without an explained safeguard.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessor list published including AI and OCR providers with locations, and a DPA covering contract data as the customer's processing.

10 — Sovereign end to end and evidenced: vendor, entity, hosting and every subprocessor European, AI processing within the EU on providers the customer can see, certifications (ISO 27001, BSI C5 or equivalent) published.

Report an error

The General Counsel

The contracting entity is Ironclad, Inc. of San Francisco; the privacy policy says information is transferred to, processed and stored in the United States, or for certain customers the European Union, and no subprocessor list including AI or OCR providers is published on the captured pages. OpenAI appears as a collaborator on the responsible-AI page without a processing location — an EU option under a non-EU entity with the chain unnamed is exactly where a repository of our most confidential commitments should not sit. 1 3 11

Report an error

The Procurement Analyst

The contracting entity is Ironclad, Inc. of San Francisco, and the privacy policy states information is transferred to, processed and stored in the United States, or for certain customers, the European Union. We found no public information on a published subprocessor list or on where AI processing of the contract text runs — for a repository holding a company's most confidential commitments, that gap weighs heavily. 1 3 4 11

Report an error

The Sales Ops Owner

The contracting entity is Ironclad, Inc. of San Francisco, and the privacy policy states information is transferred to, processed and stored in the United States, or for certain customers the European Union — EU hosting as an option from a non-EU entity. We found no public information on a published subprocessor list including the AI or OCR providers, and the named OpenAI collaboration gives no processing location; for a repository holding my counterparties' most confidential commitments that is the option-only level. 1 3 11

Report an error

The IT Integrator

The contracting entity is Ironclad, Inc. out of San Francisco, and the privacy policy states information is transferred to, processed and stored in the United States, or for certain customers, the European Union — EU hosting as an exception rather than the default. The subprocessor list, including whoever performs the AI and OCR work on contract text, is not published on the captured pages, and I found no public information on certifications such as ISO 27001 or BSI C5. 1 3 4 11

Report an error

The Data Protection Officer

The contracting entity is Ironclad, Inc. of San Francisco, and the privacy policy states information is transferred to, processed and stored in the United States, or for certain customers, the European Union — EU hosting as an option from a non-EU entity, while the policy also confirms legal data such as social security numbers and trade secrets is processed. We found no public information on a subprocessor list, on where AI and OCR processing run, or on a data processing agreement covering contract data including counterparties' personal data; the named OpenAI collaboration carries no stated role or location. 1 3 11

Report an error

The Skeptic

The contracting entity is Ironclad, Inc. of San Francisco, information is processed and stored in the United States, "or for certain customers, the European Union", no subprocessor list including AI or OCR providers appears on the captured pages, and the location of AI processing is unstated. For a repository holding a company's most confidential commitments and those of its counterparties, EU hosting as an exception on a non-EU entity with an unnamed chain is the picture the pages give. 1 3 11

Report an error

Pricing transparency not rated — the vendor publishes no price

Show reasoning
How this is scored

Whether a buyer can compute the real annual cost from public pages alone: the pricing basis (per user, per contract, per module), which features sit in which tier, add-ons for AI, e-signature volume or integrations, onboarding and migration fees, and the minimum term.

0 — No public prices at all; every tier is a sales conversation.

3 — A starting price exists, but the pricing basis (users, contracts, modules) or which features sit in which tier is unstated — the invoice is unknowable.

5 — Tier prices public with the pricing basis and main limits given, but at least one commonly needed piece (AI features, signature volume, integrations, extra users or onboarding) is unpriced.

8 — Every tier priced publicly with its basis and limits, add-on prices listed, onboarding and migration costs stated, minimum term and VAT treatment given.

10 — Complete price computability: annual invoice derivable for a given number of users, contracts and signatures, with every add-on, overage and implementation fee published.

Report an error

The General Counsel

The public pricing page names the solutions — contract lifecycle management, AI assistant, e-signature — plus deployment options and free academy access, but publishes no tier price, no pricing basis, and nothing on add-ons, onboarding, migration fees or the minimum term. There is no number to check against a budget; the real cost lives entirely in the sales conversation. 2 4

Report an error

The Procurement Analyst

The captured pricing page names the solution modules, deployment options and free extras but states no price, pricing basis, tier contents, add-on costs or minimum term. We found no public information on onboarding or migration fees either, so an annual invoice cannot be computed from the published pages. 2

Report an error

The Sales Ops Owner

The captured pricing page names the solution modules — contract lifecycle management, AI assistant, eSignature — and deployment options, but we found no public prices, no pricing basis and no tier limits on it, and add-ons like signature volume or integrations go unmentioned as costs. As the person who has to put a number in next year's budget, I cannot compute an annual invoice from public pages, so every tier is a sales conversation. 2

Report an error

The IT Integrator

The captured pricing page names the solutions — contract lifecycle management, AI assistant, eSignature — and deployment options from self-led to partner-led, but no price figure, pricing basis, tier limits, add-on costs or minimum term appears. Every tier is a sales conversation, so I cannot compute the annual cost from public pages at all. 2

Report an error

The Data Protection Officer

The captured pricing page names the contract lifecycle management, AI assistant and eSignature solutions plus free extras and deployment options, but shows no price, no pricing basis and no tier limits. From the public pages alone a buyer cannot derive any part of the annual cost, and onboarding or migration fees are not mentioned. 2

Report an error

The Skeptic

The captured pricing page names the solutions you can start with — contract lifecycle management, AI assistant, eSignature — and deployment paths from self-led to legal engineers to partners, but contains no figures at all. We found no public information on tier prices, the pricing basis, add-ons, onboarding fees or a minimum term; every cost element is a sales conversation. 2

Report an error

European sovereignty — proven facts

0 of 4 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Ownership Not determined — uncited Report an error
Data residency Not determined ⚠ unverified — uncited Report an error
Subprocessors Not determined ⚠ unverified — uncited Report an error

Questions about Ironclad

Is Ironclad European?

No. whats-best.ai classifies Ironclad as Rest of world.

Where does Ironclad store data?

The default storage location for customer data is not stated on the vendor’s pages as of 13 Oct 2026. The vendor’s pages mention United States as hosting location, per the vendor’s page captured 13 Oct 2026.

Does Ironclad have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

What are the best alternatives to Ironclad?

As of 21 Oct 2026, the panel rates Tomorro (2.5/5), Precisely (2.5/5) and fynk (2.5/5) highest among the other 19 Contract Management (CLM) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Precisely (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Ironclad alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Sources (13)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage ironcladapp.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
  2. 2 Pricing page ironcladapp.com Checked 13 Oct 2026 Details →
  3. 3 Privacy policy legal.ironcladapp.com Checked 13 Oct 2026 Details →
  4. 4 Terms of service legal.ironcladapp.com Checked 13 Oct 2026 Details →
  5. 5 Drafting, templates & clause library — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →
  6. 6 Drafting, templates & clause library — found from sitemap ironcladapp.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
  7. 7 Negotiation, redlining & approval — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →
  8. 8 Negotiation, redlining & approval — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →
  9. 9 Repository, deadlines & obligations — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →
  10. 10 Repository, deadlines & obligations — found from sitemap ironcladapp.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
  11. 11 AI extraction & review transparency — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →
  12. 12 Integrations, signature & exit — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →
  13. 13 Integrations, signature & exit — found from sitemap ironcladapp.com Checked 13 Oct 2026 Details →