Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan, entity and modules
Public claim only
Customers contract with Ironclad, Inc. under the Enterprise Services Agreement (v2.2, 1 July 2026) plus Order Form, DPA and AI Addendum. CLM includes create/review/sign/store/analyse/fulfil; Jurist and AI Assist are optional AI Products. Clickwrap (Pactsafe) has a separate subprocessor list. Product Descriptions effective 25 June 2025.
Ask: Confirm the Order covers CLM only or also Jurist/AI Assist/Clickwrap, US vs EU tenancy, and whether we are on the July 2026 ESA or a negotiated form.
Cloud regions
Public claim only
Security page: US-hosted Google Cloud Platform, multiple zones. Subprocessor list also has a CLM EU datacenter (GCP, MongoDB, OpenAI, Anthropic and others in the EU). No on-premises option found. No Australian region.
Ask: Will our tenancy be US or EU GCP, which zones, and is an Australian region available?
CLM, Jurist and AI Assist
Public claim only
CLM: workflows, repository, 175 out-of-the-box AI clauses plus customer-trained custom clauses/properties. AI Assist: generative redlines/clauses 'powered by OpenAI', configurable per users/groups. Jurist: multi-agent review, playbook redlines, Word editing, optional Online Mode for web-sourced memos. AI Credits and Fair Use Policy applies. Use of AI Products is optional.
Ask: Which of AI Assist, Jurist (including Online Mode and redlining agents), custom clauses and Clickwrap will be enabled and how are AI credits billed?
Governing law and Australian coverage
Public claim only
ESA: California law; exclusive San Francisco state/federal courts. DPA lists the Australian Privacy Act 1988 among Applicable Data Protection Laws and uses SCCs (Ireland) for EEA transfers. No Australian-law/forum option in the published ESA.
Ask: Will you accept Australian law and courts (or a non-exclusive Australian forum) and a signed APP schedule, or is California/SF mandatory?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Client-facing use and authority to process
Public claim only
Authorised Users are employees, agents or contractors of Customer or Affiliates. ESA 2.5: customer warrants it may disclose Customer Data to Ironclad. Publicity requires prior written consent (s 4.3). Clickwrap can present terms to counterparties. No Australian engagement-letter template found.
Ask: Confirm counterparties will not use Jurist; provide engagement-term wording covering US/EU hosting, OpenAI/Anthropic, Online Mode, training opt-out and 90-day deletion; and keep publicity off.
Foundation-model and clause-detection providers
Public claim only
CLM US subprocessors: OpenAI (AI, USA), Anthropic (AI, USA), GCP (cloud and AI infrastructure, USA), Extend (AI, USA). EU datacenter list: OpenAI, Anthropic and GCP in the EU. Product Descriptions still say AI Assist is 'powered by OpenAI'. Jurist 'leverages multiple LLMs' and will update infrastructure. Customer cannot pin a model family on the public materials. Older AI Addendum said EU-hosted AI features still send data to the US OpenAI; current v2.1 (20 April 2026) dropped that paragraph — confirm which version applies.
Ask: Name every model family, version and region for our tenancy (clause detection, AI Assist, Jurist); produce ZDR artefacts; and can we disable Anthropic, OpenAI or Extend?
Subprocessors
Public claim only
Published list at /subprocessors: US CLM includes Adobe, Amplitude, Anthropic, Datadog, Elastic, Extend, GCP, Mailgun, MongoDB, OpenAI, Segment, Snowflake (Security & Data Pro), WorkOS, others — all USA. EU list relocates several of those to the EU. Clickwrap uses AWS USA. DPA: 30 days' email notice of new Third Parties; object then 30 days' good-faith discussion, else terminate the affected part of the service. Support: UK subsidiary, Velocity Global/Turnkey, Morae (India).
Ask: Confirm the US vs EU list for our tenancy; disable Snowflake/analytics if they receive contract text; and keep 30-day notice without shrinking it in the Order.
Training and secondary use
Public claim only
AI Addendum v2.1: training on Customer Data, Input and Output happens only if administrators Opt In to AI Training Settings (perpetual licence to train Ironclad models, with de-identification/aggregation safeguards). Opt Out stops new training already underway is excluded. Even without Opt In, Customer grants Ironclad a licence to use Input and Output to evaluate performance and accuracy (s 2.1). ESA: Usage Data (anonymised/aggregated, including benchmarks) is Ironclad-owned. AI subprocessors are contractually barred from training their own models on Customer Data; ZDR where available. Support article: vendor models were trained on public and proprietary contract data historically.
Ask: Confirm our tenancy is Opted Out of AI Training Settings, that s 2.1 evaluation cannot re-identify our matters, and that OpenAI/Anthropic ZDR is on for Jurist and AI Assist.
Feedback, ratings and product improvement
Public claim only
ESA: Feedback is assigned to Ironclad for any purpose. Support: Provide Jurist with Feedback. Analytics subprocessors (Amplitude, Segment, Sprig, Census) are USA/EU. Usage Data may be used to improve and market products.
Ask: Can Jurist feedback and product analytics derived from our contracts be disabled or confined to our tenant?
Retention of contracts, prompts and LLM copies
Public claim only
During the Term, Customer Data is stored to perform the Services. After termination: 28-day courtesy export then DPA 90-day destruction. AI subprocessors: ZDR where available (Jurist page claims ZDR with OpenAI and others). Datadog logs are listed subprocessors. Administrator-configurable prompt retention was not documented.
Ask: For our tenancy, list retention for repository, Jurist chats, AI Assist prompts, Datadog, MongoDB backups and each LLM, confirming ZDR on OpenAI and Anthropic.
Deletion on instruction and on exit
Public claim only
DPA 8.2: destroy all copies including archival copies within 90 days; return within 30 days on request; Certificate of Deletion within 30 days of request. ESA 7.c points to DPA 8.b. Opt Out of training does not unwind training already underway.
Ask: Contract numbered deletion including backups, embeddings, Jurist chats and LLM copies, with the certificate, and confirm Opt Out plus deletion does not leave our data in already-trained models.
Vendor and contractor access to content
Public claim only
DPA: persons/Third Parties Processing Customer Personal Data under confidentiality. ESA: employees and contractors with a business need to know. Morae Global (India) is listed for support. Customer-exportable vendor-access logs were not found. Security Portal contact is security@ironcladhq.com.
Ask: Enumerate every human-access path (US, UK, India, AI providers); can we require per-ticket consent; is access logged and exportable?
SSO, MFA, admin controls and audit logs
Public claim only
SAML SSO is included with CLM packages. Support documents Entra ID SSO/SAML and SCIM. Administrators control AI Training Settings and which users/groups get AI Assist. Exportable prompt/admin logs were not specified in the ESA.
Ask: On the plan we are buying, confirm SSO-only, MFA, SCIM, IP allow-listing, and an exportable audit log of prompts, exports, admin changes and vendor access.
Encryption in transit and at rest
Public claim only
Security page: TLS 1.2 or higher in transit; AES-256 at rest. DPA Information Security Program: encryption in transit and at rest. Customer-managed keys were not offered in the public materials.
Ask: Name algorithms for every store (including embeddings, Jurist chats, Snowflake, MongoDB backups and each LLM link), who holds keys, and whether customer-managed keys are available.
Independent security assurance
Public claim only
Security Portal (request-access): ISO 27001, 27017:2015, 27018:2019, 27701, SOC 1 Type 2, SOC 2. Security page: SOC 1 and SOC 2 Type II (security, availability, confidentiality, privacy); annual pentest; quarterly vulnerability testing; CSA CAIQ. Reports were not inspected. IRAP was not found. DPA: annual Customer audit right.
Ask: Provide under NDA current SOC 2 Type II (scope including Jurist/OpenAI/Anthropic), ISO certificates, latest pentest, and any Australian Essential Eight/IRAP mapping.
Contract, DPA, confidentiality, IP and liability
Public claim only
ESA v2.2 + DPA (includes Australian Privacy Act 1988) + AI Addendum. Cap: 12 months' fees; 3× for Special Claims (Customer Data, security, confidentiality, Data Indemnity). Uncapped for intentional misconduct/gross negligence, Ironclad IP indemnity, and customer indemnities. Customer owns Customer Data, Input and Output (to the extent law allows). Output errors are Customer's risk. Publicity needs consent. Amendments in writing signed by both. Assignment restricted except reorganisation/sale (not to a competitor).
Ask: Will you keep the 3× Special Claims cap, sign an APP schedule, Australian law, no AI-training Opt In, and flow-down ZDR to OpenAI/Anthropic?
Cross-border processing and Australian residency
Public claim only
Default production is US GCP. EU datacenter exists. DPA authorises transfers including EEA/UK/Switzerland to the United States with SCCs and DPF. No Australian region. If EU-hosted, older AI Addendum required US OpenAI for AI features; current v2.1 lists EU OpenAI/Anthropic on the EU subprocessor table — confirm the live path. India support (Morae) may see tickets.
Ask: Can we lock EU (or US) GCP including EU OpenAI/Anthropic with no US LLM fallback, and exclude India support from document content?
Breach notification and incident history
Public claim only
DPA: notify without undue delay and within Applicable Data Protection Law timeframes, and in no event longer than 48 hours, with details for regulator/individual notices. Security Portal 2 May 2024: HelloSign/Dropbox Sign incident; Legacy Signature recipient names/emails exposed; signed documents said not exposed. Dec 2025: React2shell CVE reviewed, vendor says not affected.
Ask: Contract 48-hour notice for any suspected incident affecting Customer Data, NDB cooperation, Australian-hours security contact, and confirm whether our tenancy ever used Legacy Signature/HelloSign.
Change of terms, models and control
Public claim only
ESA amendments require writing signed by both parties. Price/model changes on 60 days' notice at renewal. Subprocessor changes: 30-day email. Jurist page: Ironclad will update LLM infrastructure as systems advance. AI Addendum has been revised several times in 2025–2026 (including dropping the EU-to-US OpenAI paragraph). Beta Technology is as-is, may be withdrawn without notice.
Ask: Lock model providers and regions on the Order; require a testing window before LLM changes; and give termination and data-return rights if Jurist Online Mode or a new AI subprocessor is added without consent.
Export, transition and shutdown
Public claim only
Customer may export Customer Data at any time; 28-day courtesy repository access after termination; DPA 90-day deletion and optional 30-day return plus deletion certificate. No escrow found. Clickwrap records have separate retention implications.
Ask: Demonstrate a full tenancy export (contracts, workflows, playbooks, Jurist chats, logs) in open formats and transition assistance rates.
Storage, e-sign and Jurist connectors
Not confirmed
Named connectors: DocuSign, Adobe Sign, Dropbox Sign, Drive/OneDrive/Box/Dropbox/Egnyte, Word, Google Docs. Enabling a connector grants that provider access to Customer Data. Legacy Dropbox Sign had a 2024 incident. Jurist Online Mode is a web-retrieval connector.
Ask: For each connector we would enable, show identity, scopes, whether documents are copied, how we disconnect, and how copies are purged.
Jurist Online Mode
Public claim only
Support: Online Mode lets Jurist 'Search verified web sources' and pull latest legal information with in-line Bluebook citations; user enables Access the web / Search verified web sources under the input box. Which sites are 'verified', whether the prompt/contract is sent, and default-off vs default-on were not in the ESA. This is open-web retrieval for authority-citing memos.
Ask: Can Online Mode be disabled tenant-wide; what query payload leaves Ironclad; which domains are searched; and does Jurist refuse to answer when no source is retrieved?
Agents, redlines and confirmation gates
Not confirmed
Jurist redlining agent can automatically redline entire contracts against a playbook. Support documents Accept/Reject Jurist changes. Procurement AI agents were announced. No public list of send/share/sign/write-back gates or prompt-injection testing was found. ESA: customer assumes Output risk.
Ask: List every action Jurist, AI Assist and workflow automations can take; which require explicit per-action approval; how untrusted third-party paper is isolated; and provide the latest injection/red-team summary.
Human review of outputs
Public claim only
AI Addendum: AI Products are not a substitute for human oversight; Customer must review and validate Output before use. Jurist UI includes Accept/Reject changes. No mandatory supervisor gate or exportable per-output review log with model version that ordinary users cannot disable was found.
Ask: Can we require supervisor sign-off before redlines leave the firm, export a per-document record of model route and reviewer, and keep Online Mode and unsupervised agents off?
