Contract Management (CLM)
Oneflow
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Oneflow AB (publ) · oneflow.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Oneflow at a glance
- Vendor
- Oneflow AB (publ)
- Headquarters
- Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting
- Not stated on the vendor’s pages as of 13 Oct 2026
- Free plan
- Not stated on the vendor’s pages as of 13 Oct 2026
- Panel verdict
- The AI panel rates Oneflow 2/5, the mean of 6 judges. Oneflow is AI-powered contract lifecycle management from Oneflow AB (publ), a publicly listed vendor headquartered in Stockholm. how scores are made
- As of
- Vendor pages captured 1 Oct 2026 to 13 Oct 2026; evaluated by the panel 15 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Oneflow is AI-powered contract lifecycle management from Oneflow AB (publ), a publicly listed vendor headquartered in Stockholm. It is strongest on integration and exit, scored 5 to 6, where the judges credit a documented API, named integrations with Salesforce, HubSpot, Microsoft Office 365, Google Workspace and Zapier, single sign-on, and PKI-based signing with Swedish BankID, itsme and Smart-ID. Authoring and templates, negotiation and approval, and sovereignty each cluster at 4: free and custom template libraries and in-system approvals whose evidence ends at send-for-signature, and a European base with processing stated to run primarily within the EU/EEA. Weakest are repository and obligations and AI extraction control at 2 to 3: the repository is described as searchable with tracked key terms, but the only reminders shown go to signers during signing, and the named AI features carry no public information on model, training or controls. No criterion shows a genuine split; the one-point spreads on repository and AI reflect differing credit for claims published without implementation detail. No price figures are published, and pricing transparency scores are not counted in the weighted verdicts.
Speaks for it
- A documented API with developer resources, single sign-on and two-step verification, plus named Salesforce, HubSpot, Microsoft Office 365, Google Workspace and Zapier integrations.
- One-click generation of proposals, quotes or employment contracts from monday.com, with names, dates and attached PDFs transferred into the draft automatically.
- Approval flows run in the system: approvers edit, comment and approve unseen by the counterparty, enforceable at template level, with automatic send for signature once approvals complete.
- Signing is PKI-based with timestamps and tamper sealing, and electronic IDs include Swedish BankID, itsme and Smart-ID.
- A free account and a free trial are offered, alongside a library of free templates across named categories plus custom templates.
Held against it
- The only reminders shown go to signers during signing, and we found no public information on obligations carrying owners, statuses, notice periods or renewal dates.
- Write with AI, AI Extract, AI Summary, AI Review & Insights ($) and AI Insights Premium ($) are named with no public information on the model provider, training on customer contract text, or a way to switch AI off.
- We found no public information on redlining with tracked changes, a Word round-trip or version comparison, so negotiation with the counterparty beyond sending for signature is unevidenced.
- Exit is promised as retrieval or deletion in a generally accepted format, and the terms allow Oneflow to automatically move you to a free subscription upon termination.
- Subprocessors are disclosed only as categories such as providers of IT and communication services, and processing may be transferred to the United States if a supplier's chain sits outside the EU/EEA.
Best for
- You generate quotes, proposals or employment contracts straight from monday.com records and want one-click drafting with real-time status updates back in the CRM.
- You need internal sign-off before contracts go out — approvers who edit, comment and approve unseen by the counterparty, enforced at template level.
- You want a European vendor: Oneflow AB (publ), publicly listed, with headquarters and board seat in Stockholm and processing stated to run primarily within the EU/EEA.
- You want to try before buying: a free account, a free trial and a library of free templates are offered.
Avoid if
- You need deadline and obligation management — the reminders shown go to signers during signing, not to owners of notice periods or renewals.
- You require processing to stay entirely within the EU — the privacy notice says processing is primarily within the EU/EEA but may be transferred to the United States if a supplier uses servers or sub-suppliers outside the EU/EEA.
- You need a controlled exit — the terms allow Oneflow to automatically move you to a free subscription upon termination, and export is promised only in a generally accepted format.
- You want pooled or shared logins — each purchased seat is a licence for one named individual user only, with unique login credentials.
The scores
| Criterion | Panel median |
|---|---|
| Drafting, templates & clause library | 2 of 5 |
| Negotiation, redlining & approval | 2 of 5 |
| Repository, deadlines & obligations | 1.5 of 5 |
| AI extraction & review transparency | 1.5 of 5 |
| Integrations, signature & exit | 2.5 of 5 |
| European sovereignty | 2 of 5 |
Negotiation, redlining & approval
Show reasoningHide reasoning
How this is scored
Getting from draft to agreed text with a counterparty and through internal sign-off: redlining in Word and in the browser, external collaboration, version comparison, approval workflows, and a record of who approved which version.
0 — No negotiation support; versions are emailed back and forth outside the system.
3 — Comments and a version list inside the system, but no redline comparison, no Word round-trip, and approvals handled by email.
5 — Redlining with tracked changes, a Word add-in or round-trip that keeps changes, counterparty access without a licence, version comparison, and configurable approval steps by contract type or value.
8 — Conditional approval routing (value, deviation from playbook, risk), parallel and sequential approvers with delegation, an audit trail of every change and approval per version, and internal comments kept separate from what the counterparty sees.
10 — Negotiation is an auditable record: every concession traceable to who proposed and who approved it, approval rules an auditor or the board can read, negotiation duration reported per contract type, and the full history exportable with the signed version.
The General Counsel
Approvals are handled inside the system: designated approvers edit, comment and approve without the counterparty seeing their involvement, and approval flows can be locked at template level — a record, not a sign-off by email. We found no public information on tracked-changes redlining, a Word round-trip or version comparison, so counsel-to-counsel negotiation would stay in email. 6 6
The Procurement Analyst
Approval flows with internal approvers hidden from the counterparty, approval enforced at template level, and automatic send-for-signature once approvals complete are all evidenced. I found no public information on redlining with tracked changes, version comparison or a Word round-trip, which is the daily grind of negotiating with a counterparty. 6 6 8
The Sales Ops Owner
Approval flows exist in-system: designated approvers edit, comment and approve before sending, hidden from the counterparty, with approval locks at template level and automatic send for signature once approvals complete — exactly the approval-to-signature handoff I want. But I found no public information on redlining or tracked changes, a Word round-trip, version comparison, or approval routing by deal value or discount. 6 6
The IT Integrator
Approvals run in the system rather than by email: designated approvers edit, comment and authorise before sending, their involvement hidden from the counterparty, with approval flows enforceable at template level and signature dispatch automatic once approvals complete. We found no public information on redlining with tracked changes, a Word round-trip, version comparison, or approval routing by value, risk or deviation from approved wording. 6 6 8
The Data Protection Officer
Approval flows are real: designated internal approvers can edit, comment and approve without the counterparty seeing their involvement, approvals can be enforced at template level, and signature follows automatically once approvals complete. We found no public information on redlining with tracked changes, a Word round-trip, version comparison, or approval routing by value and risk, so negotiation with the counterparty beyond sending for signature is unevidenced. 6 8 6
The Skeptic
Internal approval is genuinely in the product — approvers edit, comment and approve before sending, invisible to the counterparty, and approval can be enforced at template level with automatic release to signature. That is the whole of it: we found no public information on redline or version comparison, a Word round-trip that preserves tracked changes, counterparty access without a licence, or an audit trail of who approved which version. 6 8
Repository, deadlines & obligations
Show reasoningHide reasoning
How this is scored
Knowing what has been signed and what it requires: a searchable repository with metadata, notice periods and renewal dates captured and reminded, obligations tracked to an owner, access rights by department, and reporting on the portfolio.
0 — A file store with folders; no metadata, no dates and no reminders.
3 — Metadata fields and an end date with an email reminder, but notice periods and auto-renewal are not modelled and reminders go to one person.
5 — Notice periods, renewal terms and end dates modelled as fields, reminders with escalation to named owners, full-text search including scanned contracts (OCR), and access rights per department or contract type.
8 — Obligations and milestones tracked with owners and status, contract hierarchies (framework, amendments, orders) linked, reminders logged so a missed deadline can be traced, and portfolio reports on renewals, value and counterparties.
10 — The repository is a system of record a company can be audited on: every deadline derived from a cited clause, reminders and their acknowledgements logged, retention and deletion rules per contract type, and a portfolio view a CFO can use for commitments and cancellations.
The General Counsel
The repository is described as searchable, a single source of truth that tracks key terms and obligations, and automated workflows remind signers about missing signature deadlines. We found no public information on notice periods and renewal terms as modelled fields, obligations tracked to a named owner, OCR search or portfolio reporting — the difference between an archive and something I can defend in an audit. 8 1
The Procurement Analyst
A searchable repository and a claim to track key terms and obligations is all the detail there is; I found no public information on notice periods or auto-renewal modelled as fields, reminders escalating to a named owner, department-level access rights, or portfolio reports on renewals and cancellations. The only reminders evidenced go to signers during signing, not to deadline owners. 8 1
The Sales Ops Owner
The captured pages describe a searchable central repository claimed as a single source of truth that tracks key terms and obligations, but I found no public information on notice periods or renewal dates modelled with named owners and escalation, OCR search of scanned contracts, contract hierarchies, or portfolio reporting. I could not run a renewal calendar on what is published. 1
The IT Integrator
The captured pages describe a searchable repository as a single source of truth where teams track key terms and obligations, and automated workflows send reminders — though the only reminders shown go to signers. We found no public information on notice periods or auto-renewal modelled as fields, reminder escalation to named owners, full-text search with OCR, access rights per department, or portfolio reporting. 8 1
The Data Protection Officer
The repository is described as a searchable single source of truth where key terms and obligations can be tracked, and automated workflows send reminders — but to signers during the signing process, which is not deadline management. We found no public information on modelling of notice periods, renewal and end dates, escalation to named owners, full-text search of scanned contracts, or access rights per department. 8 1
The Skeptic
The repository is asserted as "searchable" with key terms and obligations tracked, but nothing shows an obligation getting an owner or a status. Reminders in the captured pages go to signers during execution, and we found no public information on notice periods and auto-renewal being modelled, escalation to named owners, OCR search, department-level access rights, or portfolio reports. 8 1
AI extraction & review transparency
Show reasoningHide reasoning
How this is scored
Whether the AI that extracts dates and clauses or reviews a draft is disclosed, verifiable and controllable: named model provider and processing location, no training on customer contracts, extracted values shown with their source passage, and features the customer can switch off. A product without AI features is judged on stating so.
0 — AI extraction or review is marketed with no statement of the model, where it runs, or what happens to the contract text.
3 — AI features described as a benefit with a general privacy assurance, but no model provider named, no statement on training, and extracted values shown without their source.
5 — The model provider or subprocessor named, a stated commitment not to train on customer contracts, extracted values linked to the source passage for confirmation, and AI features that can be disabled per account.
8 — AI processing available within the EU, each AI feature documented with its purpose and inputs, accuracy or confidence shown per extracted field, review results traceable to the playbook rule that triggered them, and an EU AI Act position published.
10 — AI is an accountable assistant: customer choice of model or EU-only processing, no retention of contract text by the model provider stated contractually, every AI-suggested value logged with who confirmed or corrected it, and AI off by default until the customer enables it.
The General Counsel
AI is marketed by name — Write with AI, AI Extract, AI Summary, AI Review & Insights — and the privacy notice states personal data is never sold and is processed primarily within the EU/EEA, with possible transfer to the United States if a supplier requires it. We found no public information on the model provider, on training with customer contract text, on extracted values shown with their source passage, or on switching AI features off, so none of it is verifiable or controllable. 2 3 8
The Procurement Analyst
Oneflow AI is marketed with extract, summary, review and drafting features, some flagged as paid add-ons, but I found no public information naming the model provider, where contract text is processed, whether it is used for training, or whether extracted values are shown with their source passage. The privacy notice's general assurances and EU/EEA-primary statement cover personal data, not the AI chain on my contracts. 2 3 8
The Sales Ops Owner
AI writing, extraction, summary and review are marketed by name, backed by a general assurance that processing runs primarily in the EU/EEA and that personal data is never sold. But I found no public information naming the model provider, stating whether customer contracts are used to train models, showing extracted values linked to their source passage, documenting each feature's purpose, or offering a per-account switch to disable the AI. 2 3 8
The IT Integrator
AI Extract, AI Summary and Write with AI are marketed with premium review marked as paid add-ons, but we found no public information naming the model provider, stating whether customer contracts are used for training, or showing extracted values linked to their source passage. The only chain-level safeguards are general: personal data is never sold, and the agreement restricts transfers outside the EEA except as its data processing terms permit. 2 3 4
The Data Protection Officer
AI writing, extraction, summaries and review are marketed as benefits, backed only by a general assurance that personal data is never sold and processing is primarily in the EU/EEA. We found no public information naming the model provider, on training on customer contracts, on extracted values shown with their source passage, or on disabling AI features per account — and contract text is exactly the material I need this disclosure for. 2 3 8
The Skeptic
AI Extract, AI Summary and AI Review are sold as named features, two of them paid add-ons, yet we found no public information on the model, where it runs, training on customer contract text, extracted values shown with their source passage, or switching AI off. The privacy notice says processing is "primarily" within the EU/EEA but may be transferred to the United States if a supplier's sub-suppliers sit outside — precisely the location question these features raise and leave open. 2 3 8
Integrations, signature & exit
Show reasoningHide reasoning
How this is scored
How contracts connect to the rest of the company and leave it again: CRM, procurement and ERP integration, e-signature (and which eIDAS level), SSO, an API, and a documented export of documents together with their metadata, versions and audit trail.
0 — No integrations, no API and no stated export; contracts can only be downloaded one by one.
3 — One CRM or storage integration and a bulk download of files, but metadata, versions and audit trail stay behind.
5 — A documented API, integrations with named CRM and storage systems, e-signature integrated with the level stated (simple, advanced or qualified), SSO, and a bulk export of documents with their metadata.
8 — Maintained integrations with systems common in DACH (SAP, Microsoft 365, Salesforce, DATEV-connected or procurement tools), qualified electronic signature available, webhooks, SCIM, and an export that includes versions, approvals and audit trail in an open format.
10 — Exit is designed in: a versioned API with a deprecation policy, a documented migration path in and out with the format stated, deletion after contract end confirmed, and the full repository — files, metadata, obligations and history — handed back without a professional-services fee.
The General Counsel
A documented API with developer resources, named integrations with Salesforce, HubSpot, Microsoft 365 and Google Workspace, single sign-on, and PKI-compliant signatures with BankID, itsme and Smart-ID give a workable spine, and the terms promise retrieval or deletion of data in a "generally accepted format". We found no public information on export including metadata, versions and audit trail, on webhooks or SCIM, or on the eIDAS level being stated for the signature. 2 4 6 8
The Procurement Analyst
A documented API, SSO, named integrations including Salesforce, HubSpot, Microsoft 365 and a deep monday.com generation link, plus PKI-based digital signatures with timestamps and electronic IDs such as Swedish BankID, cover most of the connected workflow. The eIDAS level is never named, and the termination export is promised only in a generally accepted format with no word on versions, approvals or audit trail — and Oneflow may move me to a free subscription after termination. 2 4 5 8
The Sales Ops Owner
A documented API with developer resources, named Salesforce, HubSpot, Microsoft 365 and Google Workspace integrations, single sign-on, and native signing with named electronic IDs (Swedish BankID, itsme, Smart-ID) on PKI-compliant certificates with timestamps cover my quote-to-signature flow in one system. Terms promise data return or deletion on termination in a generally accepted format, though I found no public information on the eIDAS signature level, webhooks, SCIM, or an export that carries versions, approvals and audit trail. 2 8 8 4
The IT Integrator
There is an API with developer resources, single sign-on with two-step verification, and named integrations for Salesforce, HubSpot, Microsoft Office 365 and Google Workspace; signing is PKI-based with BankID, itsme and Smart-ID, timestamps and tamper sealing, though we found no public information stating the eIDAS signature level. For exit the terms offer retrieval or deletion in "such generally accepted format as provided by Oneflow from time to time" — we found no public information on an export carrying versions, approvals and audit trail, an API versioning or deprecation policy, SCIM, webhooks, or SAP and DATEV connectivity. 2 4 8 5 8
The Data Protection Officer
A documented API, single sign-on, and named integrations with Salesforce, HubSpot, Microsoft 365, Google Workspace and Zapier are published, with PKI-compliant digital signatures, timestamps and electronic IDs such as Swedish BankID, itsme and Smart-ID. We found no public information stating the eIDAS level, and exit is promised only as retrieval in a 'generally accepted format' — with no public information on whether versions, approvals and the audit trail travel with the files. 2 4 8 8
The Skeptic
There is a documented API with developer resources, named integrations for Salesforce, HubSpot, Microsoft 365, Google Workspace and Zapier, SSO, and PKI-sealed digital signatures with BankID, itsme and Smart-ID — though the eIDAS level is not stated in the captures. The terms promise retrieval or deletion of your data "in such generally accepted format as provided by Oneflow from time to time"; we found no public information on an export carrying versions, approvals or audit trail, or on webhooks, SCIM, a migration path or deletion confirmed after contract end. 2 4 7 8
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity is, where contracts and their extracted data are hosted, and who the subprocessors are — including the AI and OCR providers the text is passed to. Independently sourced by the sovereignty pipeline; weighted with care here because a contract repository holds a company's most confidential commitments and those of its counterparties.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and AI processing of unclear location.
3 — EU hosting offered as an option while the contracting entity is non-EU, or the subprocessor list is absent, or AI and OCR processing run outside the EU without saying so.
5 — EU hosting as standard and an EU contracting entity, but parts of the chain — AI models, OCR, email delivery, support — are non-EU without an explained safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessor list published including AI and OCR providers with locations, and a DPA covering contract data as the customer's processing.
10 — Sovereign end to end and evidenced: vendor, entity, hosting and every subprocessor European, AI processing within the EU on providers the customer can see, certifications (ISO 27001, BSI C5 or equivalent) published.
The General Counsel
Oneflow AB (publ) is publicly listed in Stockholm with its headquarters and board seat there, and the pages state processing primarily within the EU/EEA with a DPA restricting transfers outside the EEA to SCC-based mechanisms. We found no public information naming the hosting infrastructure or the AI and OCR providers in the chain — the privacy notice names subprocessors only as generic categories — and we found no public information on certifications such as ISO 27001, which for a company's most confidential commitments is not good enough. 3 4 7
The Procurement Analyst
Oneflow AB (publ) with headquarters and board seat in Stockholm and primary processing within the EU/EEA gives a European base. I found no public information on a named subprocessor list, where AI or OCR processing of contract text runs, the hosting infrastructure, or certifications such as ISO 27001 or BSI C5, and the privacy notice concedes transfers such as to the United States when a supplier's chain requires it. 3 4 7 8
The Sales Ops Owner
The vendor is a publicly listed Swedish company headquartered in Stockholm, with processing stated to run primarily in the EU/EEA and transfers outside restricted to DPA mechanisms such as standard contractual clauses. But the subprocessor disclosure names only generic categories of IT and communication providers, the hosting infrastructure is unnamed, and I found no public information on where AI processing runs or on certifications such as ISO 27001 or BSI C5. 8 3 4
The IT Integrator
The captured registration names Oneflow AB (publ) with headquarters and board seat in Stockholm, processing is stated to run primarily within the EU/EEA, and the agreement restricts transfers outside the EEA to SCC-covered cases. But the privacy notice names only generic IT and communication providers rather than a subprocessor list with locations, and we found no public information on the hosting infrastructure, where the AI models process contract text, or certifications such as ISO 27001 or BSI C5. 3 4 8
The Data Protection Officer
The contracting entity is Oneflow AB (publ) in Stockholm, processing is primarily in the EU/EEA, the data-processing agreement restricts transfers outside the EEA, and meeting recordings stay in the EU/EEA. But subprocessors are described only by category — IT and communication service providers as processors, law firms and auditing firms as independent controllers — with no names or locations, and we found no public information on where AI and OCR processing of contract text runs or on certifications such as ISO 27001 or BSI C5. 3 4 7 8
The Skeptic
The vendor is clearly European — Oneflow AB (publ), registered name, Stockholm headquarters and board seat all on its own pages — and the DPA restricts transfers outside the EEA to contractual clauses. But hosting is only "primarily" in the EU/EEA with possible United States transfers via suppliers, subprocessors appear only as generic categories such as providers of IT and communication services, and we found no public information naming AI or OCR providers, the hosting infrastructure, or certifications such as ISO 27001 or BSI C5. 3 4 7 8
Pricing transparency
not rated — the vendor publishes no price
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: the pricing basis (per user, per contract, per module), which features sit in which tier, add-ons for AI, e-signature volume or integrations, onboarding and migration fees, and the minimum term.
0 — No public prices at all; every tier is a sales conversation.
3 — A starting price exists, but the pricing basis (users, contracts, modules) or which features sit in which tier is unstated — the invoice is unknowable.
5 — Tier prices public with the pricing basis and main limits given, but at least one commonly needed piece (AI features, signature volume, integrations, extra users or onboarding) is unpriced.
8 — Every tier priced publicly with its basis and limits, add-on prices listed, onboarding and migration costs stated, minimum term and VAT treatment given.
10 — Complete price computability: annual invoice derivable for a given number of users, contracts and signatures, with every add-on, overage and implementation fee published.
The General Counsel
The pricing page offers a free account and marks "AI Review & Insights ($)" and "AI Insights Premium ($)" as paid add-ons, but we found no public price figures for any paid tier, no pricing basis beyond the named-seat licence in the terms, and no onboarding or migration costs. From these pages alone I cannot compute an annual invoice, and a personalised demo with a specialist is the offered route in. 2 4 6
The Procurement Analyst
The only public pricing signals are a free account and free trial, a per-seat licence model in the terms, and AI features flagged with a dollar sign rather than a figure. I found no public information on tier prices, which features sit in which tier, onboarding or migration fees, or the minimum term, so the annual invoice cannot be computed from the captured pages. 2 4 6 8
The Sales Ops Owner
The captured pricing page offers a free account and flags AI review and insights as paid add-ons with a dollar symbol but quotes no figures, and the terms reveal only a per-seat licence basis with automatic renewal. I found no public information on tier prices, per-seat rates, onboarding or migration fees, minimum term or VAT treatment — nothing I could put in next year's budget. 2 8 4
The IT Integrator
A free account is offered, the pricing page marks "AI Review & Insights ($)" and "AI Insights Premium ($)" as paid extras, and the terms licence seats to one named user each with auto-renewal until terminated. We found no public information on tier prices and their limits, which features sit in which tier, per-signature or integration costs, or the price of the tailored onboarding — the real annual invoice is not computable from the captured pages. 2 4 1 8
The Data Protection Officer
A free account and free trial are offered, the licence basis is one named individual per seat, and the pricing page flags AI Review & Insights and AI Insights Premium as paid add-ons — yet the captured pages give no amounts for the paid plans or their limits. We found no public information on onboarding and migration fees or the minimum term, so a buyer cannot compute the annual invoice. 2 4 6 8
The Skeptic
The verifiable pricing facts are a free account, a free trial, ($) markers flagging two AI add-ons as paid, and a per-seat model with automatic renewal confirmed in the terms. We found no published price figure for any tier, seat, add-on or the tailored onboarding, so an annual invoice cannot be computed from what is public. 2 4 6 8
European sovereignty — proven facts
0 of 4 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Ownership | Not determined | — | uncited Report an error |
| Data residency | Not determined ⚠ unverified | — | uncited Report an error |
| Subprocessors | Not determined | — | uncited Report an error |
Questions about Oneflow
Is Oneflow European?
Yes. whats-best.ai classifies Oneflow as EU-Made.
Where does Oneflow store data?
Not stated on the vendor’s pages as of 13 Oct 2026.
Does Oneflow have a free plan?
Not stated on the vendor’s pages as of 13 Oct 2026.
What are the best alternatives to Oneflow?
As of 21 Oct 2026, the panel rates Tomorro (2.5/5), Precisely (2.5/5) and fynk (2.5/5) highest among the other 19 Contract Management (CLM) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Precisely (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Oneflow alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Legal entity, Data residency. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 48 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 17 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 11 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 9 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 7 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (8)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage oneflow.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
- 2 Pricing page oneflow.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
- 3 Privacy policy oneflow.com Checked 13 Oct 2026 Details →
- 4 Terms of service oneflow.com Checked 13 Oct 2026 Details →
- 5 Drafting, templates & clause library — found from sitemap oneflow.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
- 6 Negotiation, redlining & approval — found from sitemap oneflow.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
- 7 Integrations, signature & exit — found from sitemap oneflow.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
- 8 Integrations, signature & exit — found from sitemap oneflow.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →