ReviewFlow AI logoReviewFlowAI
Sign inOpen dashboard
Agentic AI for contract intake

AI-powered contract intake and review

Email contracts in. ReviewFlow AI extracts the key terms, cross-checks them against your internal policies with RAG, and only puts risky deals in front of a human reviewer.

Sign inView demo flow

Send to contracts@inbound.reviewflowai.xyz or upload directly.

Inbox · contracts@inbound.reviewflowai.xyz
Signed MSA — Acme Health Inc.
Approved
legal@acmehealth.example
Data-processing agreement — Nimbus AI
Needs review
contracts@nimbus.example
// extracted
vendor_name: "Nimbus AI"
total_value: 145000
payment_terms_days: 90
data_processing_clause_present: false
→ blocked: dpa_missing, unknown_high_value_vendor

How it works

From inbox to decision in a single automated pipeline.

1
Email contract

Vendors send signed PDFs to an inbound address. A signed webhook stores the attachment.

2
AI extracts key terms

Structured JSON with per-field confidence: vendor, value, term, liability, DPA, governing law.

3
RAG validates policies

pgvector search across your internal policy library flags deviations from what's allowed.

4
Approve or route

Clean, high-confidence contracts auto-approve. Anything risky is queued for a human reviewer.

Built for procurement & legal ops

A complete agentic pipeline, not a chat wrapper.

Real inbound email

Webhook accepts parsed emails with base64 PDF attachments, verified with a shared secret or Svix signature.

Structured JSON extraction

Strict schema with per-field confidence — vendor, term, value, liability, governing law, DPA.

Policy RAG with pgvector

Your internal policies are chunked, embedded, and semantically searched on every submission.

Deterministic routing

Pure rules decide the final verdict. LLM findings are advisory — never a black-box approval.

Human review dashboard

Reviewers see extracted fields, cited policy chunks, and can edit, re-validate, or decide.

Audit trail

Every ingest, edit, re-run, and decision is logged with actor, timestamp, and payload.

Knowledge base management

Add or edit policies in-app; embeddings regenerate automatically.

Vendor management

Approved vendor list with aliases, risk tier, and per-vendor high-value thresholds.

Try it end-to-end

Wire your inbound provider (Resend, SendGrid, Postmark, Mailgun) to a single webhook, or use the built-in simulator to send a PDF straight to the agent.

Inbound address
contracts@inbound.reviewflowai.xyz
Accepts PDF, PNG, JPEG, WEBP (scanned or digital). Up to 15 MB.
ApprovedSigned MSA · Acme Health
Needs reviewDPA · Nimbus AI (missing DPA)
ErrorScanned PDF · unreadable content

Trust & security

Built with sensible defaults for handling third-party legal documents.

Private attachment storage

Contracts live in a private bucket; downloads are proxied through an authenticated same-origin API.

Authenticated dashboard

Only signed-in reviewers can access submissions, policies, and audit history.

Role-based access via RLS

Postgres row-level security + a security-definer role table separate admins from reviewers.

Signed webhook verification

Resend inbound uses Svix HMAC verification; the generic endpoint checks a shared secret.