Boutiq AI
Boutiq AI is a German legal tech company that helps in-house legal teams adopt AI. Its offer spans the Treasure Contracts contract lifecycle platform, Legal AI Academy training, custom legal automation and a public sector edition.
What is Boutiq AI?
Boutiq AI is a German legal tech company based in Otterfing, Bavaria, and entered in the commercial register in November 2024. It presents itself as a strategic advisor rather than a pure software vendor, combining legal expertise built up in international business law firms with the work of actually putting AI into a legal department's routine. Its own wording is direct: it helps in-house legal teams design, implement and scale AI-powered legal and contract processes.
The catalogue has four parts. Treasure Contracts, the AI-powered contract lifecycle management platform, is described as the central nervous system for a company's agreements, and covers six named stages: creation, review, negotiation, signature, execution, and analysis and archiving. Contracts are drafted from no-code templates and pre-approved clause blocks. The AI reads PDF and Word files to extract clauses, deadlines, parties and risks, while configurable Review Playbooks score incoming drafts against the company's own standards and mark deviations with a red, amber or green rating. Negotiation stays inside the platform with comments, redlining and version control; signature is built in or routed through DocuSign and Adobe Sign; and after signature the system follows milestones, deliverables, SLAs and obligations, including checks before payment. Everything lands in a central archive with deadline alerts and portfolio analysis, connected to Salesforce, HubSpot, SAP, SharePoint, Google Drive, OneDrive, Slack and Microsoft Teams.
The Legal AI Academy trains people rather than processes, through executive workshops, legal prompt engineering, needs analysis and applied AI integration, delivered as one-day workshops, hackathons, multi-day seminars or Leadership Academy programmes, and described as product-neutral by design. Custom Legal Tech Solutions pick up where a standard tool stops: mass processing of claims, information requests, complaints or regulatory reviews, and legal logic no off-the-shelf product models, built to run reliably whether a thousand or a million cases go through. Most are built on Treasure Contracts, and the company says it will tell a client when that is the wrong foundation. A fourth offer, Treasure Public Sector, brings the same stack to public administration on sovereign German hosting. Note the scope: this page covers the publisher and its whole offer, while Treasure Contracts now runs its own separate website.
What it does
- Automate the whole contract lifecycle, from first draft to archive
- Pull clauses, deadlines, parties and risks out of PDF and Word contracts
- Check incoming contracts against your own review playbook and flag every deviation
- Stop missing renewal and termination deadlines
- Analyse an entire contract portfolio to support strategic decisions
- Train legal teams to work with AI, tool by tool and prompt by prompt
- Commission bespoke automation for legal work no standard product covers
When to use Boutiq AI / When not to
A quick filter to help you decide if Boutiq AI is the right fit.
When to use Boutiq AI
- In-house legal departments at mid-sized companies and large groups in the German-speaking DACH region
- Legal operations and legal transformation teams rebuilding their contract processes
- Contract managers and compliance officers handling a high volume of agreements
- Organisations facing mass casework, such as claims, information requests or regulatory reviews
- Public bodies and any organisation bound to EU-only, German-hosted data
When not to use Boutiq AI
- Teams looking for self-service software: there is no online sign-up, no free plan and no trial
- Buyers who need a published price or an order of magnitude before contacting a salesperson
- Developers expecting a public API, a developer portal or technical documentation
- Users who need a mobile app: no iOS or Android application exists, the product is web-only
- Anyone who wants to read the contractual terms first, since no general terms and conditions are published
How to use Boutiq AI
A typical end-to-end flow, from setup to results.
- Start from the contact form: there is no online sign-up, and every call to action on the site leads there
- Or write to mail@boutiqai.com, the single published address; the site promises a reply within 24 hours
- Book the free 30-minute introductory call offered in the homepage FAQ
- Describe your contract volume, your processes and your existing systems so the team can scope the work
- Agree on scope and price, which is quoted case by case rather than taken from a price list
- Import existing contracts from folder trees, SharePoint, Google Drive or other sources; categorisation and metadata extraction run automatically
- Set up templates, pre-approved clause blocks and the Review Playbooks that encode your own standards
- Connect CRM, ERP, storage, e-signature and messaging tools; the company says systems are connected without moving data
- Count on a few days for a basic rollout, and four to eight weeks when individual workflows, integrations and data migration are involved
- For needs the standard platform cannot cover, take the Custom Solutions route: requirements and process analysis first, then design, build and handover
Pros & Cons
Pros
- Complete and verifiable legal identity: register entry HRB 297762 at the Munich court, VAT number, full postal address and phone
- Unambiguous EU hosting, with platform servers at a provider located in Germany and a sovereign German option for public bodies
- GDPR compliance claimed in plain terms, with access controls, audit trails and data processing agreements
- Named team with public LinkedIn profiles and international law firm backgrounds
- One supplier for the platform, the training and the bespoke development, instead of three
- Legal AI Academy described as product-neutral by design, so training is not a sales pitch for the platform
- Basic implementation announced within a few days, with the vendor doing the setup work
Cons
- No public pricing whatsoever: no pricing page, no amount, no range, not even an entry-level figure
- No general terms and conditions published, so no contractual commitment can be checked before contacting sales
- No security certification of its own; the only one cited on the site, the EU-US Data Privacy Framework, belongs to HubSpot and Google
- No public API and no technical documentation for either the publisher or the product
- No free plan and no trial of the software; the only free element is a 30-minute consulting call
- Very young and very small: registered on 21 November 2024, with three employees listed on LinkedIn
- Visible site neglect: template leftovers mentioning a 'Treasure CRM' and a 360-degree view of customer data on a contract page, unedited social placeholders, an outdated event banner with a dead link, and structured data pointing at dead URLs and the wrong city
Pricing & Plans
No price is published. There is no pricing page, no amount and no range anywhere on the site, and the structured data declares a currency without a figure. The FAQ states that pricing depends on company size, the range of features required, the number of documents processed and the number of users, and that flexible licensing models are offered on request. No free plan and no free trial are announced. The only element provided at no cost is a 30-minute introductory call, which is a consulting conversation rather than a trial of the software. A figure can therefore only be obtained by contacting the company for a quotation.
- the site mentions flexible licensing models without naming or detailing any
- and quotes each customer individually according to company size
- feature scope
- document volume and number of users. Dedicated pages exist for mid-sized companies and for startups and scaleups
- but they are commercial segments
- not priced plans.
Data, GDPR & hosting
A consolidated view of how Boutiq AI handles your data.
GDPR overview
GDPR compliance is claimed explicitly and repeatedly, on the homepage FAQ and on the contract management page, and backed by three named measures: access controls, audit trails and data processing agreements. All data is stated to be hosted exclusively in the EU, on servers run by a provider in Germany. As a German-established company, Boutiq AI needs no Article 27 representative and names none; no data protection officer is appointed either. A central Digital Services Act contact point is published at mail@boutiqai.com, in German and English. For transfers outside the EU, the site relies on the EU-US Data Privacy Framework certification held by its processors, HubSpot and Google, not by itself. No security certification of its own is named, and the company says it is still working on further ones. This is a self-declaration, not an audit.
Who owns the data?
The only document the company publishes is a combined legal notice and privacy policy. It names boutiq ai GmbH as the controller for data processed on the website, represented by managing director Tobias Warken, Berghamer Str. 20, 83624 Otterfing, reachable on +49 89 24 88 79 69. No data protection officer is appointed. That document stops at the website: it says nothing about who owns the contracts and business data loaded into the Treasure Contracts platform, and no terms and conditions exist to fill the gap. Website visitors keep the usual GDPR rights, listed in full: access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority.
Reuse rights
No terms and conditions are published, so nothing on the site states what a customer may do with the contracts and outputs it holds in the platform, or whether they can be reused freely. The privacy policy covers the website only: browsing data is processed to deliver the site and analyse usage, and form data to handle offers, orders and enquiries, on the basis of Art. 6(1)(a), (b) and (f) GDPR, with Sec. 25(1) TDDDG for cookies. Three processors are named for that website data, each under a data processing agreement: HubSpot Ireland Limited for hosting and CRM, Google Ireland Limited for Tag Manager, and Instantly.ai. Whether customer data may be used to train AI models is never addressed, in either direction.
Data retention & training
Hosting summary
Two different hostings should not be confused. For the platform, the site states that all data is hosted exclusively in the EU, a claim repeated on the homepage and on the contract management page, and the privacy policy adds that technical server operation is entrusted to a provider with a server location in Germany, under a data processing agreement. That provider is not named. The public sector edition, Treasure Public Sector, is described as sovereignly hosted in Germany. The marketing website itself is a separate matter: it runs on HubSpot Ireland Limited in Dublin, with Google Ireland Limited for Tag Manager, and for any transfer outside the EU the company relies on those processors' EU-US Data Privacy Framework certification rather than its own. Jurisdiction is therefore German for the platform and Irish for the website, both inside the EU. No data centre address, region list or infrastructure certification is published.
Things to keep in mind
Risks and trade-offs to weigh before adopting Boutiq AI.
- Scope check: this page describes boutiqai.com, the publisher and its full offer. The Treasure Contracts platform now runs a separate live website, so make sure you are reading about the right one before comparing features
- Data ownership is undocumented: the privacy policy covers the showcase website only, and with no terms and conditions published, nothing states who owns the contracts you upload or what happens to them if you leave
- AI training is never addressed, in either direction. Do not assume an opt-out exists; ask for it in writing before uploading confidential agreements
- Automation complacency: playbook checks and traffic-light risk scores are convenient enough to make a team stop reading. Flagged deviations, and above all unflagged ones, still need human legal judgement
- Certifications: the company holds no named security certification and says it is still working on some. The EU-US Data Privacy Framework certification cited on the site is held by HubSpot and Google, not by Boutiq AI
- Two different hostings coexist: the marketing website runs on HubSpot in Ireland, the platform on an unnamed provider in Germany. A promise about one is not a promise about the other
- Supplier risk: a company registered in November 2024 with three listed employees, selling a system that would hold your entire contract portfolio, calls for an exit and data-export clause in the contract
Setup & Integrations
Technical difficulty
Low for the customer, because the vendor does the work. A basic implementation is announced within a few days, and four to eight weeks for complex setups involving individual workflows, integrations and data migration. Existing contracts are imported from folder trees, SharePoint, Google Drive or other sources, with automatic categorisation and metadata extraction, and existing systems are connected without moving data. There is no self-service path at all: no sign-up, no trial, and the same team advises and implements. Expect project coordination and internal decisions on templates and playbooks rather than technical work.
Deployment
Integrations
Behind Boutiq AI
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is Boutiq AI?
What is Treasure Contracts?
How much does it cost?
Is there a free trial or a free plan?
Where is the data hosted?
Is Boutiq AI GDPR compliant?
Is there an API?
Is there a mobile app?
How long does implementation take?
Which systems does it integrate with?
Should you pick Boutiq AI?
Boutiq AI is easy to place: a small, clearly identified German legal tech company selling one platform, one training programme and one bespoke development practice to in-house legal teams, mostly in the German-speaking market. The identity checks out, with a commercial register entry at the Munich court, a VAT number, a physical address in Otterfing and a named team whose profiles are public. For a European buyer with a hosting constraint, the pitch is unusually clean: all data in the EU, platform servers at a provider in Germany, a sovereign German option for public administration, and GDPR compliance claimed in plain terms.
The reservations are just as clear. Nothing commercial can be verified before talking to sales: no price, no range, no named plan, and no general terms and conditions at all. No security certification is held by the company itself, and the only one quoted on the site belongs to its processors. It is also under a year old and lists three employees, which is a genuine continuity question for a system that would hold an entire contract portfolio. The site shows its age in places too, with template leftovers about customer data on a contract page and an event banner for March 2026 still live in September behind a dead link.
The result is a credible, well-scoped offer that behaves like a consultancy with a product rather than a self-service tool, and should be assessed that way. Before anything sensitive is uploaded, ask for the contractual terms, the retention rules, a written position on whether your contracts may be used to train models, and the name of the German hosting provider. If those answers come back clean, the EU-hosting argument is a strong one.
- Choosing a selection results in a full page refresh.
- Opens in a new window.