All apps

Is Ironclad safe with your data?

C
Ironclad icon

Ironclad

Ironclad, Inc.

61/100

Partial disclosure · medium confidence

Ironclad earns a C (61/100) because it discloses its data practices only in part.

#57

of 102 apps ranked

61

score · Legal avg 59

+2

vs category average

Grade scaleA · 85–100B · 70–84C · 55–69D · 40–54F · 0–39

Ironclad's privacy policy gives clear data-subject rights and names specific international-transfer safeguards. It says nothing about AI model training or about input and output ownership, and it shares identifiers for interest-based advertising under a named opt-out. Good rights and transfer disclosure alongside no mention of training or content use place the policy in the middle of the C band.

What Ironclad's privacy policy says about your data

Sells or shares for ads with opt-out

The policy states that disclosing identifiers, device identifiers and cookies for interest-based advertising may be a sale or sharing under the CCPA. It offers a named opt-out through the Your Privacy Choices link, a privacy email, and the Global Privacy Control signal.

Named transfer safeguards

International transfers rely on signed Standard Contractual Clauses, and Ironclad states it is certified under the Data Privacy Framework. Both appear explicitly in the International Data Transfers section.

Silent on AI training

The policy never addresses whether user-submitted contract content or other inputs are used to train AI or machine-learning models. The training-use indicators score zero because of this silence, with no harmful reservation stated either way.

Vague retention only

Retention is described as no longer than reasonably necessary to fulfil the purposes for which it was collected, with no day count and no deletion timeline. It scores as a vague half, short of a concrete period.

What the policy is silent or vague on

  • Not stated: keeping user inputs out of model training
  • Not stated: a way to opt out of training
  • Not stated: whether training use differs by plan
  • Not stated: your ownership of generated outputs

Ironclad privacy rating

Training-data use0 of 4 disclosed
Keeps user inputs out of model training, or makes training opt-inSilent
Names a way to opt out of or into trainingSilent
Says whether training use differs by plan or tierSilent
Lets the user keep ownership of generated outputsSilent
Data-subject rights5 of 5 disclosed
Grants a right to access your dataDisclosed
Grants a right to delete your dataDisclosed
Offers data portability in a usable formatDisclosed
Grants a right to correct your dataDisclosed
Grants a way to object to or opt out of processingDisclosed
Retention and deletion1 of 4 disclosed
States a retention period for your dataPartial
States a deletion timeline after closure or requestPartial
Sets a shorter retention for AI conversation logsSilent
Commits to collecting only the data it needsDisclosed
Third-party sharing3 of 5 disclosed
Lists the categories of third parties it shares withDisclosed
References a sub-processor list or data processing agreementSilent
Does not sell or share data for advertising, or offers opt-outPartial
Names a safeguard for international data transfersDisclosed
States a standard for government and law-enforcement accessDisclosed
Transparency3 of 4 disclosed
Discloses that you are interacting with AISilent
Marks AI-generated or synthetic outputNot applicable
Enumerates the categories of data it collectsDisclosed
Maps processing purposes to legal basesDisclosed
Is versioned and dated, with change noticeDisclosed
Sensitive data and children2 of 3 disclosed
Discloses automated decisions and a human-review pathDisclosed
Limits the use of special-category dataPartial
Governs biometric data specificallyNot applicable
States protections for children's dataDisclosed
Security and accountability0 of 3 disclosed
Describes its security safeguardsPartial
Commits to breach notificationPartial
Names a certification or a privacy contactSilent
DisclosedPartialSilentAdverseNot applicable

Details

Category
Legal
Modalities
text
Processes biometrics
No
Policy last updated
2026-05-15
Region scored
Global / US-default
Assessed
2026-06-20
Read Ironclad's privacy policy

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.

Is Ironclad safe with your data? Grade C | AI App Trust & Transparency Index