Document analysisIn production · version 2 · 2026

ContractStorm V2: contract risk analysis in the EU.

Find the contract traps before you sign.

Watch the demo video

A video of just over two minutes shows the whole flow: adding the contract bundle, masking personal data, review and approval, the Storm Index, the findings and the PDF report. The video has background music and no narration, and its text is in Finnish.

Why version 2

The first ContractStorm was finished in September 2026 and is presented as its own project. It uses Google services whose transfers outside the EU are based on the EU-approved standard contractual clauses and the EU–US Data Privacy Framework, so its use complies with the GDPR. Many companies and public organisations, however, have a stricter policy: contract material must not leave the EU at all. Version 2 was built for them. Processing of contract material now stays entirely within the EU, so organisations with a stricter data protection policy can use the service too.

What improved over version 1

Location: the application server and the database are in Finland, and the analysis runs in Vertex AI in Google’s EU region. Masking personal data: names, personal identity numbers, contact details and account numbers are replaced in the browser with tags such as [Henkilö A], and the user sees the full outgoing text and approves it before the analysis. Model: Gemini 4 Argon, chosen by running the same test contracts through several models. Reliability: the AI’s quotations are checked against the original text, so the report contains no invented citations. Report: a new results page, negotiation proposals, missing terms and a PDF. Use: licence management, Google sign-in and a one-time sign-in link for trial users. Documents: the service description, privacy notice, terms of use and data processing agreement (DPA) were rewritten to match the implementation.

How it works

The user adds the main contract and its appendices at once (PDF, Word, Excel or text) and chooses whether the contract is read from the buyer’s or the supplier’s side. After the masking review, the report is ready in a few minutes. It contains the Storm Index, an executive summary, conflicts between the appendices and the main contract, risk scoring (probability × impact × detectability), proposals for negotiation and missing terms. The report is also available as a PDF.

Buyer questions answered in advance

In business sales the IT department and the data protection officer always ask the same things. The service comes with a service description and security statement, a privacy notice, terms of use, a data processing agreement (DPA) and ready answers to typical security questions. The site’s customer service chat answers from the same documents. Licences are granted in the admin view to the users’ email addresses, and the administrators never create or see passwords. A trial user can be sent a one-time sign-in link.

My role

Diamond Consulting defined the operating logic and their consultants’ risk-assessment method. I designed and built version 2: the architecture, the EU cloud environment, sign-in and licence management, masking, the analysis guidance, the report, the PDF, the update of the legal documents and the demo video. The work was done with Claude Code and Codex in the same project folder: one implemented and the other reviewed, and a shared log kept both up to date. Before choosing the default model, I ran the same test contracts through several models.

Benefits and limits

The service brings the biggest risks to light faster than reading by hand, and the whole bundle stays in the AI’s context at once. It does not replace a lawyer; it gives the lawyer a better starting point. Detecting personal data is an aid, not perfect, so review and approval stay with the user, and the documents say so plainly.

Try it or ask more

A new account includes one free analysis. A team licence costs €4,900 per year (excluding VAT) and covers up to five users and 1,000 analyses per year. Licences are sold by Diamond Consulting. If you want to build a similar AI service on your own expertise, contact me.

Open ContractStorm