--- title: "Sirion (Sirion Labs)" url: "https://ailawframework.com/software/sirion" type: "software_profile" site: "AI Law Framework" id: "sirion" vendor: "Sirion Labs" category: "Legal-specific" segment: "Contract review and CLM" confidence: "medium" last_reviewed: "2026-10-10" --- # Sirion (Sirion Labs) > Enterprise conversational and agentic contract lifecycle platform. The security page describes SaaS controls and names cloud providers; it does not name a Sirion certificate or a hosting country. Canonical page: https://ailawframework.com/software/sirion Last reviewed: 2026-10-10 Site index for agents: https://ailawframework.com/llms.txt Plan covered: Sirion agentic CLM (Ask Sirion). The public security page was read on 2026-10-10. A DPA and a Sirion-held SOC or ISO certificate were still not found. ## Capabilities - Contract drafting - Contract review and redlining - Clause libraries and playbooks - Agentic workflows ## Key facts | Fact | Value | | --- | --- | | Deployment | SaaS | | Hosting regions | Unknown | | Australian region | Unknown | | Assurance | ISO 27001, SOC 1 and SOC 2 are attributed on the security page to the cloud providers (AWS, Azure, Oracle and IBM), not stated as Sirion certificates, GDPR: the vendor's own page states "s to manage and mitigate data security risks across infrastructure, application, and personnel. - GDPR Compliance: Sirion supports General Data Protection Regulation (GDPR) complia" (https://www.sirion.ai/library/contract-management/contract-management-security/, checked 2026-10-10)., HIPAA: the vendor's own page states "ata subject access controls, audit trails, and secure data handling within the EU and globally. - HIPAA Readiness: For customers in the healthcare sector, Sirion’s architecture supp" (https://www.sirion.ai/library/contract-management/contract-management-security/, checked 2026-10-10). | | Training on customer content | Unknown | | Pricing | No public list prices. Demo-led. | | Australian presence | Unknown | | Website | https://www.sirion.ai/ | ## What the research found | Topic | Status | Finding | Open question | Sources | | --- | --- | --- | --- | --- | | productPlan | Public claim only | Sirion agentic CLM (Ask Sirion). Homepage is marketing. | Confirm cloud SKU and which agents. | [Sirion home](https://www.sirion.ai/) | | deployment | Public claim only | The security page, read 2026-10-10, says the CLM is software as a service deployed on AWS, Azure, Oracle and IBM, with geographically dispersed data centres. It does not name a country or an Australian region. An earlier homepage pass had only implied SaaS. | Which cloud provider and region, including whether Australia is offered, will hold our contracts? | [Sirion home](https://www.sirion.ai/); [Sirion — security](https://www.sirion.ai/security/) | | features | Public claim only | Conversational/agentic contract management. | Which agents can write or send? | [Sirion home](https://www.sirion.ai/) | | jurisdiction | Not confirmed | No AU region on the homepage. | AU presence? | [Sirion home](https://www.sirion.ai/) | | licence | Not confirmed | No public price. Unverified, not applied (2026-10-10): pricing claim - Small to Mid-Sized Businesses (SMBs): Typically $30–$100 per user/month. Vendors in this category focus on ease of use, fast onboarding, and basic contract (https://www.sirion.ai/library/clm-platform/contract-management-software-cost/). not a price for this product. Unverified, not applied (2026-10-10): pricing claim Small businesses can expect to pay between $30 and $100 per user per month. Entry-level plans may limit users, contracts, or features, but they’re a practical (https://www.sirion.ai/library/clm-platform/contract-management-software-cost/). not a price for this product. | Quote? | [Sirion demo](https://www.sirion.ai/demo/) | | integration | Not confirmed | Not specified. | SSO/Word? | [Sirion home](https://www.sirion.ai/) | | support | Not confirmed | Not specified. | SLA? | [Sirion home](https://www.sirion.ai/) | | qualityEvidence | Not confirmed | No benchmark. | Accuracy? | [Sirion home](https://www.sirion.ai/) | | taskFit | Not confirmed | Enterprise CLM agents. High action risk until controls are documented. | Human-in-the-loop defaults? | [Sirion home](https://www.sirion.ai/) | | clientAuthority | Not confirmed | Counterparty workflows likely. | External users? | [Sirion home](https://www.sirion.ai/) | | modelProvider | Not confirmed | Not named. | Name LLMs. | [Sirion home](https://www.sirion.ai/) | | subprocessors | Not confirmed | Not listed. | List? | [Sirion home](https://www.sirion.ai/) | | trainingUse | Not confirmed | Not stated. | No-training clause? | [Sirion home](https://www.sirion.ai/) | | feedbackUse | Not confirmed | Not specified. | Feedback training? | [Sirion home](https://www.sirion.ai/) | | retention | Not confirmed | Not specified. | Retention? | [Sirion home](https://www.sirion.ai/) | | deletion | Not confirmed | Not specified. | Deletion? | [Sirion home](https://www.sirion.ai/) | | humanAccess | Public claim only | The security page says new hires undergo background checks, staff receive security training, and access to production is controlled. It does not say whether staff can open a customer's contracts or whether that access is notified. | Who on your staff can read contract contents, under what approval, and is that access logged and notified to us? | [Sirion — security](https://www.sirion.ai/security/) | | accessControl | Public claim only | The security page says access uses role-based control, multi-factor authentication enforced for all user accounts, SAML 2.0 single sign-on, regular access reviews, session timeout and account lockout. | Does SAML connect to our identity provider, and is MFA enforced for every account including administrators? | [Sirion — security](https://www.sirion.ai/security/) | | encryption | Public claim only | The security page says data in transit uses TLS 1.2 or higher and data at rest uses AES-256, with logical segregation of customer data and tested backups. | Are those encryption standards in the contract for our tenant, and who holds the keys? | [Sirion — security](https://www.sirion.ai/security/) | | assurance | Public claim only | The security page says AWS, Azure, Oracle and IBM align with ISO 27001, SOC 2 and SOC 1, and that Sirion is deployed on those providers. It does not say Sirion itself holds those certificates. It describes penetration testing, a bug bounty, 24x7 monitoring and a security programme, and gives infosec.request@sirionlabs.com. GDPR: the vendor's own page states "s to manage and mitigate data security risks across infrastructure, application, and personnel. - GDPR Compliance: Sirion supports General Data Protection Regulation (GDPR) complia" (https://www.sirion.ai/library/contract-management/contract-management-security/, checked 2026-10-10). HIPAA: the vendor's own page states "ata subject access controls, audit trails, and secure data handling within the EU and globally. - HIPAA Readiness: For customers in the healthcare sector, Sirion’s architecture supp" (https://www.sirion.ai/library/contract-management/contract-management-security/, checked 2026-10-10). ISO 27001: the vendor's own page states "nt is demonstrated through our adherence to internationally recognized standards and frameworks. ISO 27001:2022 – Information Security Management System ISO 27001:2022 is an internati" (https://www.sirion.ai/trust-center/compliance/, checked 2026-10-10). SOC 2: the vendor's own page states "l Reporting (ICOFR). This assurance covers secure and accurate processing of the financial data. SOC 2 Type II – Trust Services Criteria Compliance SOC 2 (System and Organization" (https://www.sirion.ai/trust-center/compliance/, checked 2026-10-10). | Provide Sirion's own current SOC or ISO report, as distinct from the cloud providers' certifications, including scope and period. | [Sirion — security](https://www.sirion.ai/security/); [GDPR on the vendor's site](https://www.sirion.ai/library/contract-management/contract-management-security/); [ISO 27001 on the vendor's site](https://www.sirion.ai/trust-center/compliance/) | | contract | Not confirmed | Not inspected. | MSA/DPA? | [Sirion home](https://www.sirion.ai/) | | transfers | Not confirmed | Not specified. | APP 8? | [Sirion home](https://www.sirion.ai/) | | incidents | Not confirmed | Not specified. | Notice timeline? | [Sirion home](https://www.sirion.ai/) | | changes | Not confirmed | Not specified. | Notice? | [Sirion home](https://www.sirion.ai/) | | exit | Not confirmed | Not specified. | Export/deletion? | [Sirion home](https://www.sirion.ai/) | | connectors | Not confirmed | Not specified. | Connectors? | [Sirion home](https://www.sirion.ai/) | | webSearch | Not confirmed | Confirm agents cannot browse the web. | Web off? | [Sirion home](https://www.sirion.ai/) | | actionControl | Not confirmed | Agentic CLM can act on contracts. | Which actions need human confirm? | [Sirion home](https://www.sirion.ai/) | | humanReview | Not confirmed | Not specified. | Audit logs? | [Sirion home](https://www.sirion.ai/) | ## Notes The security page was read on 2026-10-10 and fills encryption, access control and the cloud-provider assurance wording. A Sirion-held certificate, a hosting country, a DPA and a training statement were still not on that page. A trust URL tried in the earlier pass had 404'd. Recheck 2026-10-10: 2 claims left unverified and not applied. Confidence raised from low to medium on 2026-10-10 because a security or hosting quote on the vendor's own domain was applied. ## Sources - [Sirion home](https://www.sirion.ai/) (checked 2026-09-21) - [Sirion demo](https://www.sirion.ai/demo/) (checked 2026-09-21) - [Sirion — security](https://www.sirion.ai/security/) (checked 2026-10-10) - [GDPR on the vendor's site](https://www.sirion.ai/library/contract-management/contract-management-security/) (checked 2026-10-10) - [ISO 27001 on the vendor's site](https://www.sirion.ai/trust-center/compliance/) (checked 2026-10-10) A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.