Ironclad
Also known as: Ironclad, Inc.
Leading contract-lifecycle management with AI agents across repository, review, redlining, and approvals. Partnered with Harvey.
Ironclad is a contract lifecycle management platform sold by Ironclad, Inc. of San Francisco, used by legal, sales, procurement and finance teams at companies including Salesforce, L'Oréal, Dropbox, Zoom and Shell. A no code Workflow Designer models any contract process with conditional approvals and routing, and the repository holds executed agreements with extracted metadata, obligations and renewals.
Ironclad AI adds three layers: Ironclad Assistant answers questions about the repository in plain language, dedicated agents handle intake, drafting, negotiation, risk analysis, approvals, tracking and renewal within the live workflow, and Jurist, an agentic contract partner for lawyers, drafts and redlines against the company's playbooks and historical positions. Humans keep the final call, with AI behavior reviewable and overridable and playbooks bounding what agents propose.
It integrates with Salesforce, Slack, Microsoft Word, Dynamics 365, ServiceNow, HubSpot, NetSuite, Jira and Box, publishes a developer hub with a public REST API, OAuth 2.0, SCIM provisioning and event webhooks, and offers a clickwrap product for online agreements. Ironclad holds SOC 1 and SOC 2 Type II reports, runs annual penetration tests, and offers per tenant encryption with customer held keys as an add on. Pricing is by custom quote based on the products, users and workflows chosen.
Vendor details
Canonical URL
https://ironcladapp.com
Category
Enterprise operations agent
Subcategory
Legal — contract lifecycle management (CLM)
Company status
independent
Use cases & customers
Primary use cases
Target customers
Deployment options
In practice
Every contract waits in a queue for a lawyer to redline it. Ironclad's AI agents handle review and redlining, so routine agreements move without sitting on someone's desk.
You can't find the one clause across a thousand signed contracts. Ironclad's agents work across the repository, so the contract data is searchable instead of buried in PDFs.
Approvals stall when a contract bounces between sales, legal, and finance. Ironclad runs the approval workflow with agents, keeping the agreement moving through the right hands.
Agentic Index coverage score
9.5 / 14 capabilities · 68%
| Integrations & Tool Calling | Full |
|---|---|
|
The developer hub documents a Power Automate connector, a MuleSoft connector and integration recipes that launch workflows, sync data and write status back to the outside system. The recipes cover CRMs (Salesforce, Dynamics 365, HubSpot), service and project tools (ServiceNow, Jira), ERP (NetSuite) and file storage (Box). The marketing site adds an AppExchange approved Salesforce integration plus Slack and Word integrations, and the pricing page notes some integrations are paid add ons. SourceIronclad, developer.ironcladapp.com and ironcladapp.com/pricingread 2026-09-06 |
|
| Workflow Orchestration | Full |
|
Agentic workflows run across the lifecycle (intake, Jurist review, draft, negotiate, analyze risk, approve, store and track, renew) with a manager agent coordinating research, draft and edit agents, Ironclad Assistant invoking agents from a query, and the no code Workflow Designer letting customers define multi step approval and routing logic. SourceIronclad, ironcladapp.com/product/ironclad-ai and ironcladapp.com/pricingread 2026-09-06 |
|
| Knowledge Grounding & RAG | Full |
|
Agents reason over the customer's own contract repository, structured metadata and workflow context, Jurist grounds negotiation suggestions in the company's historical positions and redlines against its AI Playbooks, and the Assistant identifies clauses by meaning across the repository. SourceIronclad, ironcladapp.com/product/ironclad-airead 2026-09-06 |
|
| Human Oversight & Guardrails | Full |
|
Humans keep the final call: customer configured AI Playbooks bound what agents draft and redline, approval workflows route agreements by the customer's rules, and the governance surface lets teams review, override and continuously govern AI behavior; the public API exposes approval requests and approval status updates. The approval gate is built into Ironclad itself. SourceIronclad, ironcladapp.com/product/ironclad-ai and developer.ironcladapp.comread 2026-09-06 |
|
| Security, Identity & Governance | Full |
|
Routine SOC 1 and SOC 2 Type II audits are Ironclad's own, per its security page, with reports through the security portal. On the customer side, a documented SCIM 2.0 API provisions users and groups from the customer's identity provider, OAuth 2.0 scopes bound API access, and the Security and Data Pro add on gives per tenant encryption with hold your own key on GCP. The ISO 27001, 27017 and 27018 badges on the security page describe Ironclad's cloud providers, not Ironclad, while the AI page FAQ claims them as Ironclad's own. SourceIronclad, ironcladapp.com/security and developer.ironcladapp.comread 2026-09-06 |
|
| Observability & Auditability | Partial |
|
The AI page describes auditable AI behavior the customer can review, override and govern, with reasoning context such as extracted properties and redline rationale surfaced where possible, and the public API exposes the turn history of a workflow. No log of agent steps per run is documented, so rationale comes per recommendation and only where available. Activity exports to the customer's datastore sit behind the paid Security and Data Pro add on. SourceIronclad, ironcladapp.com/product/ironclad-ai and developer.ironcladapp.com/reference/getting-started-apiread 2026-09-06 |
|
| Memory & State Persistence | Partial |
|
Conversation with Ironclad Assistant carries session state as it answers questions about the repository. The contract repository and AI Playbooks work as grounding sources rather than memory, and no memory layer with a stated scope and lifetime is documented. SourceIronclad, ironcladapp.com/product/ironclad-airead 2026-09-06 |
|
| Deployment & Data Residency | Not documented |
|
Production servers run on US hosted Google Cloud Platform, as both the security page and the pricing page state. No region a customer selects, no customer cloud, on premises or customer tenant option, and no selection surface is documented. The security page also says Ironclad uses multiple data center regions from its providers to meet data residency requirements, but it names no way for a customer to choose one. An EU API host appears only on a third party profile, not on Ironclad's own pages. SourceIronclad, ironcladapp.com/security and ironcladapp.com/pricingread 2026-09-06 |
|
| Prebuilt Agents, Templates & Packs | Full |
|
Ironclad ships dedicated agents for distinct lifecycle tasks (intake, review, drafting, negotiation, risk analysis, approval, tracking, renewal) plus Jurist as a separately adopted contract review agent and Ironclad Assistant; remove one and the others still do their whole job. They arrive as stages of one CLM rather than a catalog a buyer browses, and no catalog page is published. SourceIronclad, ironcladapp.com/product/ironclad-airead 2026-09-06 |
|
| Triggers & Channel Coverage | Full |
|
Agents act on contract lifecycle events, automating approvals, reminders and routing on the customer's rules; outbound webhooks fire on selectable event types with retry, inbound launches are documented from Salesforce, Dynamics 365 and Jira automation rules, and signature requests can be scheduled through the API. SourceIronclad, ironcladapp.com/product/ironclad-ai and developer.ironcladapp.comread 2026-09-06 |
|
| Model Flexibility & Routing | Partial |
|
The AI page states Ironclad enforces do not train and zero data retention terms with external LLM providers in the plural and the November 2025 agents post describes a secure multi model architecture, so Ironclad routes across more than one provider; no customer or admin model selection is documented. Per tenant encryption keys are a security control, not a model choice. SourceIronclad, ironcladapp.com/product/ironclad-airead 2026-09-06 |
|
| APIs, SDKs & MCP Extensibility | Full |
|
developer.ironcladapp.com documents a public REST API with OAuth 2.0 (authorization code and client credentials) that creates workflows synchronously and asynchronously, updates approval status, pauses, resumes and cancels workflows, runs actions on records, manages entities and obligations, and creates and manages webhooks, alongside a SCIM 2.0 API and an OpenAPI index at its llms.txt. The pricing page lists API access among paid add ons. SourceIronclad, developer.ironcladapp.com/reference/getting-started-apiread 2026-09-06 |
|
| Testing, Debugging & Optimization | Not documented |
|
The AI page describes an internal Evaluation Framework that tests every AI feature against curated benchmarks, with subject matter experts validating outputs during development; that is the vendor's own release practice, not a customer facing test harness, test case set or release gate for the workflows and playbooks a customer configures, and none is documented. SourceIronclad, ironcladapp.com/product/ironclad-airead 2026-09-06 |
|
| Browser & Computer Use | Not documented |
|
Agents reach outside systems through documented integrations, webhooks and the public API, and Ironclad runs as a web application with Word, Salesforce and Slack integrations; no browser, desktop or computer control is documented. SourceIronclad, ironcladapp.com/product/ironclad-airead 2026-09-06 |
|
The Agentic Index coverage score grades every vendor Full, Partial or Not documented against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded
Recent platform changes
Ironclad released its August 2026 platform update, highlighted by a new Government Environment (NA2) for customers requiring FedRAMP compliance. The release also introduces the ability to connect up to 20 eSignature providers simultaneously within a single instance, alongside new global workflow conditions and expanded property types for data management.
Bears on: Security / enterprise
View sourceIronclad introduced Model Context Protocol (MCP) integrations connecting its platform with ChatGPT, Claude, and Slackbot. This allows teams to query their contract data and receive answers directly within these third-party conversational interfaces.
Bears on: MCP / tool calling / API
View sourceIronclad introduced new AI agents and capabilities specifically designed for procurement teams. The release includes AI Obligation Extraction with portfolio-wide monitoring to help organizations track compliance across their contracts.
Bears on: Agent capability
View sourcePricing
Contact for pricing
What is public
The pricing page, updated 1 September 2026, offers a custom quote only: pick products (CLM, AI assistant, eSignature), pick implementation partners, then add ons including API and integrations, additional instances and success plans. No tiers, rate card, trial or free tier are published.
Billing mechanics
Custom quote assembled from products, implementation partners and add ons on the pricing page; the billing axis is not stated.
Cost watchouts
The Open API, integrations, additional instances, success plans and the Security and Data Pro add on are documented as separate purchases; implementation partners are selected as part of the quote.
Additional watchouts
Quote only; the API, integrations, additional instances, success plans and the Security and Data Pro add on are separate purchases.
Sales call required
Yes, required for paid access
Key ambiguities
The pricing page structures the quote without pricing any component.
Support SLA / resale
Email/knowledge-base (lower) to priority/dedicated (higher) support; SOC 2 Type II; integrates with Salesforce, Slack, DocuSign, Zip, and more; partner ecosystem
Missing data
No price, tier or billing axis is published. Earlier third party benchmark ranges are withdrawn.
Related vendors
- 11th Estate — Agentic platform whose AI engine scans markets, matches an…
- Adopt AI — AI CPA firm whose agents run reconciliations, close, AP and AR, and…
- Aera Technology — Decision intelligence platform where an always on agent executes…
- Akro AI — On premise operational intelligence that automates document heavy…
- alfred_ — AI executive assistant that triages the inbox overnight and scores…
- Alloy.ai — Commerce intelligence system for consumer brands that unifies four…
Alternatives to Ironclad
The closest documented capability profiles to Ironclad among enterprise operations agents tracked by Agentic Index, ordered by similarity on the same 14 point evidence the rankings use. No vendor pays for placement.
- Workleap8.5 / 14A lighter documented profile than Ironclad
- Zip9.5 / 14Fuller documented coverage on Observability & Auditability
- Alloy.ai8.0 / 14A lighter documented profile than Ironclad
- ControlUp10.0 / 14Adds documented Deployment & Data Residency
- Deel8.0 / 14A lighter documented profile than Ironclad
- Manhattan Associates10.0 / 14Adds documented Testing, Debugging & Optimization
Similarity is computed from each vendor's Agentic Index coverage score evidence, axis by axis, not from the totals. How this evidence is graded