---
title: "Imprima (Smart Review) (Imprima)"
url: "https://ailawframework.com/software/imprima"
type: "software_profile"
site: "AI Law Framework"
id: "imprima"
vendor: "Imprima"
category: "Legal-specific"
segment: "Due diligence and data rooms"
confidence: "medium"
last_reviewed: "2026-09-21"
---

# Imprima (Smart Review) (Imprima)

> European VDR with machine-learning due-diligence review. DPA allows training on aggregated anonymised data and requires opt-out before any broader training. Standard hosting is Azure Netherlands/Ireland, not Australia.

Canonical page: https://ailawframework.com/software/imprima  
Last reviewed: 2026-09-21

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Imprima virtual data room and optional Smart Review / Smart Redaction / Summaries / Index / Compliance AI under DPA v2.3 (10 August 2026). Service Agreement law/forum sit outside the DPA.

## Capabilities

- Due-diligence document review
- Contract review and redlining
- Document summarisation

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | European Union / EEA |
| Australian region | No |
| Assurance | ISO/IEC 27001 |
| Training on customer content | Plan-dependent |
| Retention | On termination, Client chooses return or deletion of processor-held personal data, subject to lawful retention and backup cycles. Numeric active-deletion target is in DPA clause 14. |
| Legal content coverage | Room documents only. Not a licensed Australian primary-law collection. |
| Pricing | No public list prices. Demo-led. Smart Compliance has a pricing popup that was not captured. |
| Australian presence | Unknown. No Australian hosting region in DPA v2.3. Standard Azure NL/IE. |
| Website | https://www.imprima.com/ |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Plan | Public claim only | Imprima VDR plus optional AI-assisted features (Smart Review, Smart Summaries, Smart Redaction, Smart Index, Smart Compliance). DPA v2.3 dated 10 August 2026 is incorporated into the service agreement with Imprima or an affiliate. Feature-specific training uses must be described before they begin. | Which AI features are on our order, and are we on DPA v2.3? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Hosting | Public claim only | DPA: Client Personal Data hosted in the EEA. Standard: Microsoft Azure Netherlands primary, Ireland disaster recovery. Security page: Azure storage AES-256 and TLS 1.2. | Can we obtain an Australian region, or is EEA-only acceptable? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) |
| Smart Review | Public claim only | Smart Review: ML-assisted DD so users review ~10% of documents to find ~95% of issues (vendor). Marketing: the more you use it, the better it becomes. Smart Redaction, Summaries, Index, Compliance also advertised. | Which Smart features will be enabled? | [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software); [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) |
| Australia | Not confirmed | No AU hosting in the DPA (EEA Azure). No named AU customers on pages reviewed. | Is Imprima offered to Australian deals with EEA hosting only? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Pricing | Not confirmed | Book a demo. A Smart Compliance pricing popup exists; amounts not captured. | Itemised quote including AI features. | [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Access controls | Public claim only | Client controls who may access the room (DPA). SSO not specified on security/DPA extracts. | SSO/MFA and permission inheritance into Smart Review? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) |
| Support | Public claim only | DPA includes operational support response targets that are not SLAs or credits. Staff receive security training. | What are the numeric Sev-1 targets and Australian-hours coverage? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Quality | Public claim only | Smart Review 10%/95% claim is marketing, not an independent study. | Accuracy on our contract types, including Australian-style agreements? | [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Task fit | Not confirmed | Fit for VDR DD and assisted contract review inside the room. Not a citator. AI outputs remain subject to authorised user review (DPA). | Must a lawyer accept every Smart Review hit before reliance? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Guests | Not confirmed | VDR guests are Client-controlled. No AU AI-disclosure template. | Bidder-side AI off by default? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Model provider | Not confirmed | DPA discusses proprietary models and AI features; it does not name OpenAI or another LLM vendor. Azure is the host. | Name every model provider used by Smart Review/Summaries. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Subprocessors | Not confirmed | Azure is named as host. A full published subprocessor list was not found in this review. DPA contemplates subprocessors with flow-down. | Provide the current dated subprocessor list with notice/objection rights. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) |
| Training | Public claim only | DPA: may use aggregated or irreversibly anonymised information to train proprietary models used solely to provide or improve Imprima services, if it is no longer personal data and cannot reasonably identify the Client. Any AI feature that would use Client Content or Personal Data for training beyond that must be described first, with a chance to object, opt out or disable. Client Personal Data will not be given to a third party to train a public/shared model unless separately agreed in writing. | Confirm Smart Review will not train on our identifiable deal documents, and opt out of any feature-level training beyond anonymised aggregates. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Feedback | Not confirmed | Not separately specified beyond DPA training rules. | Are in-app ratings used to train models? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Retention | Public claim only | Return or delete on termination at Client choice, subject to lawful retention (billing, CRM, legal). Backups until normal cycle. Ordinary deletion target described in clause 14 (not extracted as a number here). | Numeric retention for rooms, AI indexes and backups after close. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Deletion | Public claim only | Client-chosen return or delete. Client must export first. Backups overwritten on cycle. Controller-side CRM records excluded. | Certified deletion of deal files and AI artifacts from active systems and backups. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Vendor access | Public claim only | Authorised persons under confidentiality. BYOK/CMK where separately agreed. | When can Imprima staff read room content, and is it logged? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Access | Public claim only | Client determines End User access. CMK/BYOK optional. SSO not documented here. | SSO-only and a Smart Review permission-wall test. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Encryption | Public claim only | Azure AES-256 at rest, TLS 1.2; Azure key management; CMK/BYOK where agreed. | Will we enable customer-managed keys? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) |
| Assurance | Public claim only | ISO/IEC 27001 certification covering the whole business (not only the datacentre), half-yearly independent audits (security page). DPA: ISMS aligned with ISO 27001. SOC 2 not claimed on these pages. Reports not inspected. | Current ISO 27001 certificate scoped to the VDR and Smart Review. | [Imprima VDR security](https://www.imprima.com/virtual-data-room/security); [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Contract | Public claim only | DPA v2.3 (10 Aug 2026) plus service agreement. Liability follows the Service Agreement (not restated in the DPA extract). EEA hosting. Governing law of the Service Agreement not in the DPA extract. | Provide the Service Agreement (law, forum, liability cap) and confirm DPA v2.3. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Transfers | Public claim only | Standard hosting EEA only (NL/IE). No AU region. Subprocessors not fully listed. | APP 8 assessment for EEA hosting of an Australian deal. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Incidents | Public claim only | Personal Data Breach defined. Support response targets are not breach-notice clocks. Exact notice period not extracted as 48/72 hours from the DPA grep. | What is the contractual breach-notice deadline, and will it support NDB? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Changes | Public claim only | AI training beyond anonymised aggregates requires prior description and opt-out. Feature terms may change. | Notice before a new AI feature trains on Client Content? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Exit | Public claim only | Return or delete at Client choice; export first. | Export format for documents, Q&A and Smart Review marks, then certified deletion. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |
| Connectors | Not confirmed | VDR-centric. Marketplace not reviewed. | Any outbound integrations? | [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) |
| Web search | Not confirmed | Product is room-based review. Confirm no open web. | Does Smart Review call the open web? | [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| AI actions | Not confirmed | Smart Redaction can alter documents. DPA: AI outputs subject to authorised user review. | Require human confirm before redactions are applied or answers sent to bidders. | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english); [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) |
| Oversight | Public claim only | DPA: AI-generated outputs remain subject to authorised user review and Client-controlled access. | Audit log of Smart Review use exportable? | [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) |

## Notes

Service Agreement (cap, forum, HQ) not scraped. Full subprocessor list and model providers not published on reviewed pages. SOC 2 not claimed. Marketing 10%/95% figure unverified. Privacy policy URL 404'd in this review.

## Sources

- [Imprima Data Processing Agreement v2.3 (10 August 2026)](https://www.imprima.com/data-processing-terms-english) (checked 2026-09-21)
- [Imprima VDR security](https://www.imprima.com/virtual-data-room/security) (checked 2026-09-21)
- [Imprima Smart Review / AI contract review](https://www.imprima.com/ai-due-diligence/contract-review-software) (checked 2026-09-21)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.