Inhubber
Inhubber is a German contract lifecycle management platform that stores, analyses and signs contracts in one encrypted workspace. Its AI extracts obligations, deadlines and risks, while ISO 27001 certification and German-only hosting underpin the whole system.
What is Inhubber?
Inhubber is the product name of key2contract GmbH, a Berlin company that grew out of an academic research project. Andre Sokolov started a project called Missing Link in 2017; two years later it became Inhubber, backed by Humboldt Innovation and the EXIST programme, and co-founded with Elena Mechik, now CEO, and Leonid Mechik, now CFO. The result is a contract lifecycle management platform built around three things: a central encrypted repository, AI document analysis, and native electronic signature. The homepage organises the product around four pillars. Transparency means one source of truth for every contract, with holding structures, subsidiaries and departments mirrored exactly and granular permissions applied throughout. Intelligence means the AI reads each uploaded document and surfaces obligations, renewal dates, payment terms, key clauses and both financial and legal risk exposure, then produces a readable summary. Processes and automation cover reminders, approval workflows and escalation rules. The audit trail logs every access, change, approval and signature. Security is the loudest argument. Contracts are protected by what the vendor calls user-to-user encryption, built on the public key infrastructure of an Ethereum consortium blockchain, so that only the machine on the user's side can read a document. The blockchain itself never stores contract content: only cryptographic fingerprints and anonymised audit metadata are anchored on it. The platform holds ISO/IEC 27001:2022 certification issued by Proks Certification GmbH, accredited by the German body DAkkS, and runs on AWS and DigitalOcean servers in Frankfurt am Main. Signatures come in all three eIDAS levels, the qualified one handled through the identity partner Nect. Practically, it is a browser application with no installation, plus a REST API. It accepts PDF, DOCX, XLSX, JPEG, PNG, MP4, ZIP and scans, and the vendor says its AI reads contracts in any language without prior translation. The interface itself is offered in English, German and French. Inhubber claims more than 10,000 users and names customers including the OECD, EDEKA, SHARP, TIER Mobility, rebuy recommerce and several German municipalities.
What it does
- Centralise every contract of the organisation in a single encrypted repository, structured to match holdings, subsidiaries and departments
- Have the AI summarise a document and extract obligations, deadlines, key clauses and financial or legal risks
- Trigger automatic reminders ahead of renewal dates, notice periods and payment milestones
- Collect legally binding signatures from several parties at simple, advanced or qualified eIDAS level without leaving the platform
- Route contracts through approval workflows that follow the organisation's own chain of command
- Search full text and semantically across contracts, clauses and attachments, scanned documents included through OCR
- Produce an immutable, blockchain-anchored audit trail for internal reviews and regulatory audits
When to use Inhubber / When not to
A quick filter to help you decide if Inhubber is the right fit.
When to use Inhubber
- Legal, procurement and finance teams in regulated sectors such as banking, insurance, healthcare and energy, where ISO 27001 certification and German hosting are procurement prerequisites rather than nice-to-haves
- Holdings and multi-entity groups that need subsidiaries, departments and sites mirrored exactly, each with its own permissions, contract types and approval chains
- Public authorities, municipalities and municipal enterprises, for which qualified electronic signatures and certified German infrastructure translate directly into tender compliance
- Organisations losing money to auto-renewals nobody noticed, whose first requirement is automated tracking of renewal dates, notice periods and payment milestones
- Mid-sized companies moving off Excel spreadsheets and shared mailboxes that want a working repository without a months-long implementation project
When not to use Inhubber
- Buyers who need to compare prices before speaking to a salesperson: not one amount is published, and even the entry tier routes to a quotation form
- Teams that want native mobile apps, which the vendor describes only as planned for a future release
- Organisations that require a downloadable data processing agreement or a public subprocessor list before signing, since the DPA is offered on request only and no subprocessor register is published
- Buyers who need a given connector to be live today, as SAP is marked Beta while Salesforce, Shopify and Microsoft Office 365 are still labelled Upcoming
- Individual users and consumers: this is a business platform sold through a sales demonstration, with no self-service sign-up and no published terms of use
How to use Inhubber
A typical end-to-end flow, from setup to results.
- Request a demonstration through the booking form, or ask for a free trial on the dedicated page; there is no self-service sign-up
- Receive a tailored, non-binding quotation, which the vendor says usually follows the demo within 24 hours
- Open the platform in a browser at app.inhubber.com; no local installation or dedicated IT infrastructure is needed
- Bulk-import the existing contract stock in any format, ZIP archives included, and let the AI generate document cards with summaries and key details
- Build the structure: folders, workspaces, document types with custom fields, labels and categories that mirror the organisation
- Assign permissions by role, team or responsibility, down to visibility of an individual contract
- Review what the AI extracted from each document: dates, obligations, clauses and flagged risks
- Turn those dates into tasks, reminders and calendar events, and configure approval and signature workflows in the internal validation order
- Send documents for signature at the appropriate level, including to external parties who do not need an account
- Scale up with migration support, custom configuration, ERP or CRM integrations and Microsoft SSO, all of which sit in the Professional tier
Pros & Cons
Pros
- Data sovereignty taken seriously: hosting exclusively on German servers, at AWS and DigitalOcean in Frankfurt, under German and EU jurisdiction
- ISO/IEC 27001:2022 certification delivered by a DAkkS-accredited body, with the certificate number published rather than merely asserted
- User-to-user encryption, with the vendor stating plainly that it cannot read the content of stored contracts
- Qualified electronic signatures alongside advanced and simple ones, which the vendor's own comparison table presents as rare among competitors
- Faithful modelling of complex organisations: holdings, subsidiaries, departments and municipal entities each keep their own permissions and workflows
- Quick to start: onboarding announced in under thirty minutes, with no prior integration project and no external implementation partner
- Verifiable, named customer references across several sectors, including the OECD, large German retailers and public bodies
Cons
- No published pricing whatsoever: all three tiers route to a form or to sales, and the price blocks on the pricing page are served empty
- No terms and conditions are published anywhere on the site, so only the privacy policy commits the vendor in writing
- That privacy policy dates from January 2023 and predates the AI capabilities now placed at the centre of the offer
- Nothing is stated about whether customer data is used to train models, and no opt-out is documented either way
- No public subprocessor list, and the third-party trust centre linked in the footer returns no readable content
- No native mobile apps and no public API documentation, even though the REST API is sold as a Professional-tier argument
- Several advertised integrations are not yet available, SAP being in Beta and Salesforce, Shopify and Microsoft Office 365 still upcoming
Pricing & Plans
Inhubber does not operate a permanent free plan. Its three tiers, Basic, Standard and Professional, are all commercial, and no amount is published for any of them: the price blocks on the pricing page are served empty, Basic and Standard route to a quotation form, and Professional routes to sales. No entry price point and no currency can therefore be quoted. The vendor describes its pricing as usage-based with no hidden implementation fees, depending on the number of users, the tier and the functionality required, and states that a non-binding personal quotation follows a product demonstration, typically within twenty-four hours. Annual commitment is advertised as saving up to 33% against monthly billing, and per-contract pricing is offered as an alternative arrangement. A free trial is available on request, with no published duration.
- 50 contract files per user and 1
- 000 documents
- unlimited eSignatures
- deadlines
- notifications
- tasks and custom fields
- mass import and export. Price on request
- everything in Basic plus blockchain encryption of documents
- AI document analysis
- full-text and semantic search
- unlimited workspaces and folders
- granular access control
- discussion areas
- onboarding and mentorship. Price on request
- everything in Standard plus individual processes and workflows
- API and custom integrations
- ERP and CRM integrations on demand
- migration support
- custom configuration and Microsoft SSO OIDC. Contact sales
- Per-contract pricing
- offered as an alternative to the per-user tiers and arranged directly with the sales team
Data, GDPR & hosting
A consolidated view of how Inhubber handles your data.
GDPR overview
GDPR compliance is claimed explicitly and repeatedly, on the homepage, the security page, the comparison page and in several FAQ entries. The privacy policy, effective 3 January 2023, is built on the regulation's own definitions and grants restriction, access, portability through a CSV or machine-readable export, erasure, transfer to a third party, rectification, breach notification, complaint to a supervisory authority and marketing opt-out. Transfers outside the EEA are covered by standard contractual clauses, binding corporate rules, encryption or other legally recognised means, and the vendor states it works to keep personal data on servers inside the EEA. A data processing agreement is offered on request. Under-16s need parental permission. No Article 27 representative is named or required, the company being established in Germany.
Who owns the data?
key2contract GmbH, registered at Romain-Rolland-Str. 45 E in Berlin, is the declared controller, with Andre Sokolov named as data controller contact in the privacy policy in force since 3 January 2023. Customer documents remain the customer's own. Clause 7 states that Inhubber is never a party to any contract processed on the platform, and that the customer alone is responsible for the content, quality and format of every document. The same clause claims stored documents are held in encrypted form and that Inhubber has neither control over nor access to their content. One caveat sits in clause 9: should the company be acquired or enter bankruptcy, data would be included among the assets transferred.
Reuse rights
No terms and conditions are published, so the only written framework is the privacy policy. On the customer side, reuse is unrestricted: any document can be exported in any format at any time with one click, full database downloads and automated SharePoint syncs are advertised, and no clause claims any licence over uploaded material. On the vendor side, log data, account information and business data are collected to run the platform, communicate and keep internal records. The legal bases include a legitimate interest that expressly names research and development, marketing and the protection of the vendor's own rights. Data may be disclosed to IT, storage, hosting, error logging, maintenance and payment providers, professional advisers, employees and contractors. Nothing at all is said about whether customer data feeds AI model training.
Data retention & training
Hosting summary
Inhubber states that contract data is stored exclusively in German data centres, under German and EU jurisdiction. The security page names the providers: AWS and DigitalOcean, both located in Frankfurt am Main, described as ISO 27001-certified infrastructure. Each user works in an isolated encrypted environment, documents are protected by user-to-user encryption, and regular backups cover operational data and source code as part of a disaster recovery strategy. The privacy policy is slightly broader in wording: the vendor says it does its best to keep all personal information on servers within the European Economic Area, and any transfer outside the EEA is to be covered by standard contractual clauses, binding corporate rules, technical measures such as encryption, or other legally recognised means. One technical note worth keeping separate: the marketing website itself is served through Cloudflare, so the domain resolves to an anycast address geolocated in the United States. That reflects the content delivery network in front of the public site, not where contracts are stored.
Things to keep in mind
Risks and trade-offs to weigh before adopting Inhubber.
- Total price opacity: with no published amount at any tier, a buyer cannot budget, benchmark or even sanity-check the offer before entering a sales process
- No terms and conditions are published, so the contractual relationship rests on documents the buyer only sees once negotiation has started
- The privacy policy is silent on whether customer data feeds AI model training, while invoking a legitimate interest that names research and development, and no opt-out exists
- Trusting a tool to watch every deadline can quietly erode the habit of reading contracts; if an obligation is never extracted, nobody may notice it was missed
- AI summaries of a forty-page agreement are an aid, not a legal opinion, and treating an extracted clause list as exhaustive is a real risk in regulated work
- The performance figures on the homepage, from 50% less time spent to 73% of risks caught, come with no methodology and should not be taken as commitments
- The published IP address resolves to a Cloudflare edge node in the United States; that concerns only the marketing site, but it is a reminder to verify hosting claims contractually rather than technically
Setup & Integrations
Technical difficulty
Low. Inhubber runs in a browser with no installation, no server to provision and no IT infrastructure to prepare. Existing contracts are loaded through a bulk import that accepts any format, ZIP archives included, and the AI generates document cards automatically. Basic onboarding is announced at under thirty minutes, and most teams are said to be productive on day one. Complex setups, meaning holding structures, multiple locations or custom approval workflows, get a dedicated project manager, with a full rollout stated at two to five business days. Migration support, custom configuration and Microsoft SSO sit in the Professional tier.
Deployment
Integrations
Supported languages
Behind Inhubber
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Inhubber.
Frequently asked questions
What exactly does Inhubber do?
How much does Inhubber cost?
Is there a free plan or a free trial?
Where is the data hosted, and how is it protected?
What security certifications does Inhubber hold?
Which levels of electronic signature are supported?
Does Inhubber use customer contracts to train AI models?
Is there a mobile app or a public API?
Which integrations are available?
How long does it take to get up and running?
Should you pick Inhubber?
Inhubber is a focused answer to a narrow question: how does a European organisation keep its contracts in one place without giving up control of them? The answer it offers is unusually concrete. Servers exclusively in Germany, ISO/IEC 27001:2022 certification from a DAkkS-accredited body with the certificate number published, user-to-user encryption that the vendor says leaves it unable to read the documents, a blockchain-anchored audit trail, and qualified electronic signatures. For a hospital group, a municipality, an insurer or a manufacturer with subsidiaries, that combination is not marketing decoration; it is what makes the tool usable in a tender or a supplier audit at all. The AI layer is genuinely useful rather than decorative, summarising long documents and surfacing the renewal dates that quietly cost money when nobody watches them. The reservations are just as concrete. Nothing is priced in public, including the entry tier, so no budget can be sketched without a sales conversation. No terms and conditions are published at all, which leaves the January 2023 privacy policy as the only written commitment, and that document predates the AI features now at the centre of the offer. It says nothing about whether customer material feeds model training, and no opt-out is documented. There is no public subprocessor list, the DPA arrives only on request, and the linked trust centre returns nothing readable. Several advertised connectors are still in beta or merely upcoming. Inhubber is therefore worth a serious look for compliance-driven, multi-entity organisations in the German-speaking market and across Europe, provided the buyer treats the demonstration as the moment to obtain in writing what the website leaves unsaid: the price, the data processing agreement, and a clear position on AI training.
- Choosing a selection results in a full page refresh.
- Opens in a new window.