Contracko
Contracko is an AI contract management platform that reviews every agreement for risks and obligations, extracts the key data, and tracks every deadline. Built for legal, finance, procurement and operations teams that need contract control without enterprise CLM weight.
What is Contracko?
Contracko describes itself as an operating system for your contracts: it reads every agreement and keeps the dates and obligations on track. It sits between the spreadsheet-and-shared-drive habit and heavyweight enterprise CLM suites, and is built on five pillars: Clara AI, AI contract analysis, expiry reminders, a central repository and contract tracking. Clara AI is the assistant, and its defining trait is scope: it reads the whole portfolio rather than one document, and every answer cites the contract and clause it came from. The analysis engine works on each contract as it lands, surfacing important dates, unfavourable terms and easy-to-miss issues, then breaking obligations down by party, action, severity and recurrence, alongside warranties, gaps and deviations. Automatic extraction pulls parties, dates, terms and obligations into structured fields, with custom fields in text, number, date and currency formats. Together they remove the page-by-page read and the re-typing into a spreadsheet. Around that core sits the operational layer: several reminders per contract that repeat at each renewal, with unlimited notifications on every plan; a searchable repository with contract types, metadata, folders and per-contract permissions; a dashboard for status, key dates and milestones; and live reporting with filters and PDF export. Electronic signature is built in, compliant with ESIGN/UETA in the United States and eIDAS simple electronic signature in the EU, with a full audit trail stored next to the signed PDF. Contracts arrive by bulk upload, by forwarding to a dedicated email address, through Zapier and its 6,000+ apps, or through the contract management API. Public documentation covers each theme, with markdown endpoints and an llms.txt index published for AI agents. The commercial model is unusual for the category: billing follows active contract capacity, not seats, with 5 to 30 users included per tier. The publisher is Velocity Ventures B.V. in The Hague, founded by Budi Voogt, a former music label operator who sold his previous companies and built the tool out of his own contract frictions, and the company is intentionally self-funded.
What it does
- Ask Clara AI questions in plain language across the whole contract portfolio and get answers that cite the contract and the clause they came from
- Have each contract analysed for risks, obligations, warranties, gaps, deviations and allocation of responsibility
- Upload contracts in bulk as PDF or Word and let the AI extract parties, dates, terms and obligations
- Set several reminders per contract, repeating at every renewal, with unlimited notifications on all plans
- Track status, key dates and milestones for the entire portfolio on a single dashboard
- Send a contract out for built-in electronic signature with a signing order and a complete audit trail
- Feed and connect the repository by email import, calendar sync to Google, Outlook or Apple, Zapier, or the /contracts/ingest API
When to use Contracko / When not to
A quick filter to help you decide if Contracko is the right fit.
When to use Contracko
- In-house legal teams at small and mid-sized companies handling dozens to hundreds of live contracts without a dedicated CLM function, and without paying per seat
- Finance and controlling teams that need renewal dates, contract exposure and filterable reporting in one place
- Procurement and vendor managers watching supplier terms, notice windows and automatic renewal clauses
- HR teams tracking employment contracts, contractor agreements, HR suppliers and probation or notice dates
- Contract-heavy operators in music and entertainment, real estate, construction, healthcare, energy, logistics, SaaS, hospitality, telecoms and nonprofits
When not to use Contracko
- Solo freelancers and micro-businesses with a handful of agreements: there is no permanently free plan and the entry tier starts at EUR 75 per month for 100 active contracts and 5 users
- Anyone who needs a mobile app; Contracko ships as a web application and an API only
- Organisations that require qualified electronic signatures, since the built-in signing is at the eIDAS simple electronic signature level
- Buyers whose security rules demand a vendor-held SOC 2 or ISO 27001 certificate, which Contracko does not hold: only its hosting providers are certified
- Teams whose main need is collaborative drafting, redlining and negotiation; Contracko starts from the signed or existing contract rather than generating one
How to use Contracko
A typical end-to-end flow, from setup to results.
- Start the 7-day free trial by registering at app.contracko.com/register; no credit card is required
- Upload your contracts in bulk as PDF or Word files; key details are extracted and default reminders are suggested from the moment of import
- Check the extracted fields, then organise the portfolio with contract types, counterparties, custom fields and folders
- Set the reminder schedule per contract, repeating at each renewal
- Invite the team: five roles, groups and permissions per contract or per folder, plus external sharing through expiring links valid for 1, 7 or 28 days
- Turn on TOTP two-factor authentication in the account settings, available on every plan
- Keep the repository fed automatically: forward contracts to a dedicated email address, connect a CRM, e-signature or cloud storage tool through Zapier in about five minutes, or post to the /contracts/ingest API
- Sync key dates to Google Calendar, Outlook or Apple Calendar
- On the Big Business plan, set up OIDC single sign-on yourself: verify the domain, add the provider, test it, then enforce it
- Book guided onboarding if the portfolio is large; the pricing FAQ says most teams can get started the same day
Pros & Cons
Pros
- AI analysis, extraction and the Clara assistant are included from the first paid tier, not locked behind an enterprise option
- Billing follows active contract capacity rather than seats, with 5 to 30 users included by plan and unlimited notifications and signatures on every tier
- All customer data is hosted in the EU: Hetzner data centres in Germany, PlanetScale Postgres in an AWS EU region and Cloudflare R2 with EU jurisdiction guarantees
- Customer contracts are never used to train models, and Zero Data Retention agreements are in place with OpenAI and Mistral
- The DPA publishes a named subprocessor list, 14 entries with their locations, which few vendors of this size do
- No lock-in on the way out: self-service export to CSV, JSON and files in a ZIP, AI analyses included, and free two-factor authentication on all plans
- Fast to adopt and well documented: same-day start for most teams, Zapier setup quoted at around five minutes, public docs plus markdown endpoints and llms.txt for AI agents
Cons
- No permanently free plan, only a 7-day trial, and an entry ticket of EUR 75 per month that is steep for a very small organisation
- The pricing page defaults to EUR 63 per month, which is the monthly equivalent of the annual commitment; the real monthly rate is EUR 75
- Contracko holds no SOC 2 or ISO 27001 certification of its own, those belong to its hosting providers, and its CSA STAR Level 1 entry is a self-assessment rather than a third-party audit
- Single sign-on is reserved for the Big Business plan, and SAML is only available on request
- No mobile application, web and API only, and electronic signature stops at the eIDAS simple level, with no advanced or qualified signature
- Google Gemini processes customer data without a Zero Data Retention agreement, unlike OpenAI and Mistral, and the chain includes non-EU subprocessors: OpenAI, xAI, Google and Slack in the United States, Bento in Australia
- A young, self-funded publisher with no long track record and no named customer references on the pages reviewed; the customer-content subprocessor list and the technical measures are supplied on request rather than published
Pricing & Plans
There is no permanently free plan. Contracko offers a 7-day free trial with no credit card required. The lowest paid entry point is the Small Business plan at EUR 75.00 per month on monthly billing, or EUR 750 per year on annual billing, which the pricing page displays as EUR 63 per month because an annual term is charged as ten monthly instalments, leaving two months free. The Business plan is EUR 249 per month or EUR 2,490 per year, and the Big Business plan EUR 595 per month or EUR 5,950 per year, the latter subscribed through a demo booking. Parallel US dollar pricing is offered at 90/900, 285/2,850 and 679/6,790. Capacity can be extended at any point in the term with Expansion Packs adding 5 users and 100 active contracts, at EUR 75, 100 or 125 per month depending on the plan, charged pro rata. Plan changes and capacity additions mid-term are also pro rata, and billing can be monthly or annual, in euros or US dollars.
- 100 active contracts
- 5 users
- unlimited notifications
- Clara AI assistant
- AI extraction and AI analysis
- additional capacity at EUR 75 per month
- 300 active contracts
- 15 users
- everything in Small Business plus custom teams
- additional capacity at EUR 100 per month
- 600 active contracts
- 30 users
- everything in Business plus single sign-on
- additional capacity at EUR 125 per month
- subscribed through Book demo
- custom limits
- SAML SSO
- dedicated onboarding and bespoke integrations
- quoted on request
- 5 extra users and 100 extra active contracts
- charged pro rata for the term in progress
- 7-day free trial with no credit card
- then monthly or annual billing in EUR or USD
- an annual term being the equivalent of ten monthly payments
Data, GDPR & hosting
A consolidated view of how Contracko handles your data.
GDPR overview
Contracko states it operates in line with the GDPR, without holding any certification of its own. The publisher is established in the EU (The Hague, Netherlands, KvK 87321432), so no Article 27 representative is required or appointed. The privacy policy lists the GDPR rights in full: access, rectification, erasure, restriction, portability, objection and withdrawal of consent, exercised through security@contracko.com within the statutory deadlines. There is no solely automated decision-making with legal effect, and AI features stay under human supervision. The lead authority is the Dutch Autoriteit Persoonsgegevens, or the user's local regulator. Transfers outside the EEA rely on adequacy or the EU-US Data Privacy Framework, otherwise the 2021/914 standard contractual clauses (modules 2 and 3), with a UK IDTA addendum and Swiss adaptations. A signed DPA under the Commission's clauses is available on request, and new subprocessors are announced at least 14 days in advance.
Who owns the data?
Contracko's privacy policy (v3.3, updated 18 August 2026) separates the two roles explicitly. For website visitors, prospects and account holders, Contracko is the controller. For the contracts and content customers upload, the customer remains the controller and Contracko acts purely as a processor, on the customer's instructions, governed by the Data Processing Agreement (v1.2) rather than the privacy policy. The DPA states that on termination Contracko will, at the customer's choice, delete or return all personal data and delete existing copies unless the law requires retention. Customers can also take everything out themselves at any time, through self-service export to CSV, JSON and files in a ZIP, which the documentation presents as a no vendor lock-in commitment.
Reuse rights
Customers keep control of the content they upload and can reuse, export and share it without asking Contracko for permission: export is self-service in CSV, JSON and files in a ZIP, AI analyses included. On Contracko's own side, the privacy policy lists each purpose with a legal basis under Article 6: delivering and securing the platform and billing (contract), statutory obligations (legal obligation), product and site analytics and advertising measurement (consent), B2B prospecting and lifecycle emails (legitimate interest). Prospect data is collected from public sources and enrichment vendors. Analytics and marketing cookies are opt-in only, behind a first-visit banner under the Dutch Telecommunicatiewet and ePrivacy rules. Two exclusions are stated outright: "We do not sell personal data, and we do not use it to train AI models." AI vendors operate under commercial API terms that exclude training, with Zero Data Retention agreements in place with OpenAI and Mistral, while Google Gemini sits outside that arrangement. Card details are entered directly with the payment provider and are not stored by Contracko.
Data retention & training
Hosting summary
All customer data, meaning the application, the database and uploaded files, is held in EU data centres. The application runs on Hetzner Cloud in German data centres, which the provider certifies to ISO/IEC 27001:2022 with annual audits by independent third parties. The database is PlanetScale Postgres in an AWS EU region, covered by the provider's SOC 2 Type II. Uploaded files sit in Cloudflare R2 with EU jurisdiction guarantees, under the provider's ISO 27001 and SOC 2 Type II. These certifications belong to the infrastructure providers, not to Contracko itself. Data is encrypted with TLS 1.2 and 1.3 in transit, with HSTS enforced, and AES-256 at rest. Backups are encrypted snapshots with point-in-time restore and immutability protections. Because the customer relationship is intra-EEA, it involves no restricted transfer in itself; where subprocessors sit outside the EEA, transfers rely on an adequacy decision, the EU-US Data Privacy Framework or the standard contractual clauses, modules 2 and 3.
Things to keep in mind
Risks and trade-offs to weigh before adopting Contracko.
- Over-reliance on the AI review: the analysis flags risks, obligations and gaps, but it remains decision support, not legal advice. Contracko itself states that AI features stay under human supervision, so skipping the read-through on a contract that matters is a real risk.
- Certification confusion: ISO/IEC 27001 and SOC 2 Type II belong to the hosting providers (Hetzner, PlanetScale, Cloudflare), not to Contracko, and CSA STAR Level 1 is a self-assessment (CAIQ v4), not a third-party audit. Do not present them internally as vendor certifications.
- Signature level: the built-in signature is eIDAS simple electronic signature only, with no advanced or qualified option. The site itself advises checking that it meets local requirements for the documents you sign.
- Price reading and term mechanics: the pricing page defaults to the monthly equivalent of the annual plan (EUR 63) while the true monthly rate is EUR 75. Prices can change with 7 days' notice, applying to the next subscription period, and non-renewal requires at least 30 days' notice before the current period ends.
- Capacity ceiling: plans cap active contracts at 100, 300 or 600. Crossing that ceiling means moving up a plan or buying an Expansion Pack, so portfolio growth translates directly into cost.
- AI subprocessing: Google Gemini processes customer data without a Zero Data Retention agreement, unlike OpenAI and Mistral, and the subprocessor chain reaches outside the EU with OpenAI, xAI, Google and Slack in the United States and Bento in Australia.
- Documents provided on request rather than published: the DPA, the technical and organisational measures and the full list of AI vendors are shared on demand, so ask for them before migrating a portfolio, not after.
Setup & Integrations
Technical difficulty
Low. Nothing is installed: Contracko is a web application and the account is created online. Contracts are uploaded in bulk, key details are extracted and default reminders are proposed automatically, and the pricing FAQ states that most teams can get started the same day. The no-code path runs through Zapier, quoted at around five minutes with no engineering work. A technical path exists for high volume or residency constraints through the /contracts/ingest API. Self-service OIDC single sign-on on Big Business takes four steps: verify the domain, add the provider, test, enforce. Guided onboarding can be booked for large portfolios.
Deployment
Integrations
Supported languages
Behind Contracko
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Contracko.
Frequently asked questions
How long does it take to get up and running?
What happens if I reach my active contract limit?
Are there any discounts?
Can I be billed monthly, and in which currency?
Where is my data stored?
Are my contracts used to train AI models?
Is Contracko itself SOC 2 or ISO 27001 certified?
Is a Data Processing Agreement available?
Are single sign-on and two-factor authentication supported?
Is there an API, and can I get my data back out?
Should you pick Contracko?
Contracko lands in a clear gap: AI-assisted contract management for small and mid-sized organisations that have outgrown spreadsheets but do not want a quote-only enterprise CLM. What makes it credible at that size is what comes as standard. Clara AI, contract analysis and data extraction are all in the first paid tier, and billing follows active contract capacity instead of seats, so a whole team can read contracts without moving the invoice. The data story is unusually clean for a young vendor: application, database and uploaded files all sit in EU data centres, the DPA names fourteen subprocessors with their locations, contracts are never used to train models, and export is self-service in CSV, JSON and ZIP. The reservations are just as concrete. There is no permanently free plan, only seven days of trial, and the entry ticket is EUR 75 per month on monthly billing; the EUR 63 shown by default is the annual equivalent. Contracko holds no security certification of its own: ISO/IEC 27001 and SOC 2 Type II belong to Hetzner, PlanetScale and Cloudflare, and its CSA STAR Level 1 entry is a self-assessment. Single sign-on waits for the Big Business tier, there is no mobile app, and signing stops at the eIDAS simple level. The publisher is young, self-funded and built around a single named founder in The Hague. The trial is worth taking if you manage dozens to hundreds of live contracts, you keep missing renewal or notice windows, and your buying rules do not require a vendor-held SOC 2 report or qualified signatures. Load a real batch during those seven days and check two things: that extraction reads your own contract types correctly, and that reminders line up with your actual notice periods.
- Choosing a selection results in a full page refresh.
- Opens in a new window.