--- title: "Icertis Contract Intelligence (Icertis)" url: "https://ailawframework.com/software/icertis" type: "software_profile" site: "AI Law Framework" id: "icertis" vendor: "Icertis" category: "Legal-specific" segment: "Contract review and CLM" confidence: "medium" last_reviewed: "2026-10-10" --- # Icertis Contract Intelligence (Icertis) > Enterprise AI-native CLM with a substantial Trust Center (ISO 27001:2022, SOC 1/2 Type II). Public pages reviewed do not state no-training, hosting region or model providers. Canonical page: https://ailawframework.com/software/icertis Last reviewed: 2026-10-10 Site index for agents: https://ailawframework.com/llms.txt Plan covered: Icertis Contract Intelligence enterprise CLM. Trust Center certifications are request-access. AI training, region and DPA were not on the public overview. ## Capabilities - Contract drafting - Contract review and redlining - Clause libraries and playbooks - Compliance monitoring ## Key facts | Fact | Value | | --- | --- | | Deployment | SaaS | | Hosting regions | Unknown | | Australian region | Unknown | | Assurance | SOC 2 Type II, SOC 1 Type II, ISO 27001:2022, ISO 27017, ISO 27018, GDPR: the vendor's own page states "dn.safebase.io/public/620d076d10c3f0257424ada17a07a1bede701e64/images/certifications/gdpr.svg)\\ \\ GDPR](https://trustcenter.icertis.com/?itemUid=45220873-6e51-4dbb-b1b1-37d66ee9ef95&" (https://trustcenter.icertis.com/, checked 2026-10-10)., HIPAA: the vendor's own page states "uties, including training regarding information security covering specific topics such as GDPR and HIPAA. \| \| Asset management \| Icertis maintains the assets in its cloud infrastru" (https://www.icertis.com/information/foundation/microsoftmarketplace/, checked 2026-10-10). | | Training on customer content | Unknown | | Pricing | No public list prices. | | Australian presence | Unknown | | Website | https://www.icertis.com/ | ## What the research found | Topic | Status | Finding | Open question | Sources | | --- | --- | --- | --- | --- | | productPlan | Public claim only | Icertis Contract Intelligence (ICI), AI-native CLM. Trust Center holds certs (request access). | Confirm cloud vs private deployment and AI modules. | [Icertis home](https://www.icertis.com/); [Icertis Trust Center](https://trustcenter.icertis.com/) | | deployment | Not confirmed | Enterprise cloud. Region not stated on the home/trust overview extract. | Hosting region including AU? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | features | Public claim only | AI-native contract management for enterprises. | Which AI features on our SKU? | [Icertis home](https://www.icertis.com/) | | jurisdiction | Not confirmed | No AU region on the extract. | AU datacentre? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | licence | Not confirmed | No public price. | Quote? | [Icertis home](https://www.icertis.com/) | | integration | Not confirmed | Enterprise IAM typical; not detailed here. | SSO/SCIM? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | support | Not confirmed | Not specified. | SLA? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | qualityEvidence | Not confirmed | No public legal-AI benchmark. | Accuracy on our playbooks? | [Icertis home](https://www.icertis.com/) | | taskFit | Not confirmed | Enterprise CLM. Privileged contracts need DPA/region. | In-house vs firm use? | [Icertis home](https://www.icertis.com/) | | clientAuthority | Not confirmed | Supplier/customer portals possible. | External user AI? | [Icertis home](https://www.icertis.com/) | | modelProvider | Not confirmed | Not named on home/trust overview. | Name LLM providers. | [Icertis Trust Center](https://trustcenter.icertis.com/) | | subprocessors | Not confirmed | Trust Center may hold the list behind access. | Published list? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | trainingUse | Not confirmed | Not stated on the overview. | No-training in the DPA? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | feedbackUse | Not confirmed | Not specified. | Feedback training? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | retention | Not confirmed | Not specified. | Contract/log retention? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | deletion | Not confirmed | Not specified. | Certified deletion? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | humanAccess | Not confirmed | Not specified. | Staff access logged? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | accessControl | Not confirmed | Not specified. | SSO-only? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | encryption | Not confirmed | Not on the overview extract. | TLS/AES/CMK? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | assurance | Public claim only | Trust Center: ISO/IEC 27001:2022, 27017, 27018; SOC 1 Type 2; SOC 2 Type 2 (Jan–Dec 2025 report listed); SOC 1 Type 2 Jan–Jun 2026; SOC bridge letter. Reports request-access, not inspected. GDPR: the vendor's own page states "dn.safebase.io/public/620d076d10c3f0257424ada17a07a1bede701e64/images/certifications/gdpr.svg)\\ \\ GDPR](https://trustcenter.icertis.com/?itemUid=45220873-6e51-4dbb-b1b1-37d66ee9ef95&" (https://trustcenter.icertis.com/, checked 2026-10-10). HIPAA: the vendor's own page states "uties, including training regarding information security covering specific topics such as GDPR and HIPAA. \| \| Asset management \| Icertis maintains the assets in its cloud infrastru" (https://www.icertis.com/information/foundation/microsoftmarketplace/, checked 2026-10-10). SOC 2: the vendor's own page states "bal, regional, and industry-specific standards and certifications, such as ISO/IEC 27001, SOC1, and SOC2 and others. The Icertis Trust Center is designed to provide customers with the" (https://trustcenter.icertis.com/, checked 2026-10-10). Unverified, not applied (2026-10-10): security claim ISO 27001 (https://trustcenter.icertis.com/). the quote does not state this certification. | Provide current SOC 2 Type II and ISO 27001 scoped to ICI AI. | [Icertis Trust Center](https://trustcenter.icertis.com/); [HIPAA on the vendor's site](https://www.icertis.com/information/foundation/microsoftmarketplace/) | | contract | Not confirmed | Not inspected. | MSA, DPA, cap, forum? | [Icertis home](https://www.icertis.com/) | | transfers | Not confirmed | Not specified. | APP 8? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | incidents | Public claim only | Security Operations Center mentioned in Trust Center. Clock unknown. | Breach notice timeline? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | changes | Not confirmed | Not specified. | Notice? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | exit | Not confirmed | Not specified. | Export then deletion? | [Icertis Trust Center](https://trustcenter.icertis.com/) | | connectors | Not confirmed | Enterprise integrations typical. | Enabled connectors? | [Icertis home](https://www.icertis.com/) | | webSearch | Not confirmed | CLM. Confirm no open web. | Web search off? | [Icertis home](https://www.icertis.com/) | | actionControl | Not confirmed | Contract send/approve workflows. | Human confirm before send? | [Icertis home](https://www.icertis.com/) | | humanReview | Not confirmed | Not specified. | Audit logs export? | [Icertis Trust Center](https://trustcenter.icertis.com/) | ## Notes T3. Trust Center documents not downloaded. Training/region/DPA unknown. Recheck 2026-10-10: 1 claim left unverified and not applied. Confidence raised from low to medium on 2026-10-10 because a security or hosting quote on the vendor's own domain was applied. ## Sources - [Icertis home](https://www.icertis.com/) (checked 2026-09-21) - [Icertis Trust Center](https://trustcenter.icertis.com/) (checked 2026-09-21) - [HIPAA on the vendor's site](https://www.icertis.com/information/foundation/microsoftmarketplace/) (checked 2026-10-10) A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.