Contractbook

Danish AI-powered contract lifecycle management for European businesses

Corti

Danish AI clinical decision support for emergency medicine and patient triage

Contractbook

Excellent

22/25

Corti

Excellent

24/25

Score Breakdown

DimensionContractbookCorti

Data Residency

Where is your data stored and processed?

Contractbook: EU data residency on AWS EU regions; Danish company with EU-compliant data processing

Corti: Data processed exclusively in EU data centres (Denmark/Germany). Danish incorporation means EU law governs by default. No US cloud dependency. Maximum data residency for healthcare AI.

4/5

EU data residency on AWS EU regions; Danish company with EU-compliant data processing

5/5

Data processed exclusively in EU data centres (Denmark/Germany). Danish incorporation means EU law governs by default. No US cloud dependency. Maximum data residency for healthcare AI.

Legal Jurisdiction

Which laws govern the company and your data?

Contractbook: Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

Corti: Danish ApS incorporated under Danish and EU law. GDPR and EU AI Act apply as corporate law. Datatilsynet (Danish DPA) is the lead supervisory authority. No CLOUD Act exposure. Strongest possible EU jurisdiction profile.

5/5

Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

5/5

Danish ApS incorporated under Danish and EU law. GDPR and EU AI Act apply as corporate law. Datatilsynet (Danish DPA) is the lead supervisory authority. No CLOUD Act exposure. Strongest possible EU jurisdiction profile.

Data Retention & Training

Is your data used for model training?

Contractbook: No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

Corti: Patient conversation and clinical data not used for cross-customer model training without explicit consent. Configurable retention aligned with healthcare regulatory requirements. GDPR-compliant DPA as healthcare data processor.

5/5

No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

5/5

Patient conversation and clinical data not used for cross-customer model training without explicit consent. Configurable retention aligned with healthcare regulatory requirements. GDPR-compliant DPA as healthcare data processor.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Contractbook: SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

Corti: Holds ISO 27001 (information security) and ISO 13485 (medical devices quality management), demonstrating compliance with EU Medical Device Regulation (MDR) requirements. Strong certification posture for a clinical AI company.

3/5

SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

4/5

Holds ISO 27001 (information security) and ISO 13485 (medical devices quality management), demonstrating compliance with EU Medical Device Regulation (MDR) requirements. Strong certification posture for a clinical AI company.

Regulatory Fit

Suitability for regulated industries and professional services

Contractbook: Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

Corti: Excellent fit for EU healthcare organisations including NHS, Nordic public health systems, and German/French hospital groups. MDR compliance, GDPR-native design, and EU jurisdiction make this one of the highest-scoring healthcare AI tools for European regulated use.

5/5

Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

5/5

Excellent fit for EU healthcare organisations including NHS, Nordic public health systems, and German/French hospital groups. MDR compliance, GDPR-native design, and EU jurisdiction make this one of the highest-scoring healthcare AI tools for European regulated use.

Total Score

22/25

24/25

Best For

Contractbook

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (Datatilsynet, CNIL); privacy-conscious teams who need strong data retention controls.

Corti

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (CNIL, BaFin); privacy-conscious teams who need strong data retention controls.

Detailed Comparison

Contractbook vs Corti: Trust & Compliance Comparison

Contractbook (Contractbook, DK) scores 22/25 overall with a Gold (Excellent) trust badge. Danish AI-powered contract lifecycle management for European businesses. Corti (Corti, DK) scores 24/25 with a Gold (Excellent) trust badge. Danish AI clinical decision support for emergency medicine and patient triage.

Dimension-by-Dimension Breakdown

#### Data Residency

Corti leads with 5/5 vs 4/5.

●Contractbook (4/5): EU data residency on AWS EU regions; Danish company with EU-compliant data processing

●Corti (5/5): Data processed exclusively in EU data centres (Denmark/Germany). Danish incorporation means EU law governs by default. No US cloud dependency. Maximum data residency for healthcare AI.

#### Legal Jurisdiction

Both score equally at 5/5.

●Contractbook (5/5): Danish ApS, EU-incorporated, subject to Danish and EU law, no US parent

●Corti (5/5): Danish ApS incorporated under Danish and EU law. GDPR and EU AI Act apply as corporate law. Datatilsynet (Danish DPA) is the lead supervisory authority. No CLOUD Act exposure. Strongest possible EU jurisdiction profile.

#### Data Retention & Training

Both score equally at 5/5.

●Contractbook (5/5): No training on contract data; full GDPR Article 28 DPA available; customer-controlled retention

●Corti (5/5): Patient conversation and clinical data not used for cross-customer model training without explicit consent. Configurable retention aligned with healthcare regulatory requirements. GDPR-compliant DPA as healthcare data processor.

#### Certifications

Corti leads with 4/5 vs 3/5.

●Contractbook (3/5): SOC 2 Type II certified; ISO 27001 not yet confirmed; GDPR-native architecture

●Corti (4/5): Holds ISO 27001 (information security) and ISO 13485 (medical devices quality management), demonstrating compliance with EU Medical Device Regulation (MDR) requirements. Strong certification posture for a clinical AI company.

#### Regulatory Fit

Both score equally at 5/5.

●Contractbook (5/5): Excellent fit for EU legal, procurement, and regulated industries; eIDAS-compliant e-signatures

●Corti (5/5): Excellent fit for EU healthcare organisations including NHS, Nordic public health systems, and German/French hospital groups. MDR compliance, GDPR-native design, and EU jurisdiction make this one of the highest-scoring healthcare AI tools for European regulated use.

Certifications at a Glance

Certification	Contractbook	Corti
GDPR	Yes	No
ISO 13485	No	Yes
ISO 27001	No	Yes
SOC 2 Type II	Yes	No

Overall Verdict

Corti has a clear trust advantage, scoring 24/25 compared to Contractbook's 22/25. Corti particularly excels in data residency, certifications.

Frequently Asked Questions

Which is better for EU compliance, Contractbook or Corti?

Contractbook has a TrustKit score of 22/25 while Corti scores 24/25. Corti currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Contractbook and Corti compare on data residency?

Contractbook scores 4/5 for data residency (EU data residency on AWS EU regions; Danish company with EU-compliant data processing), while Corti scores 5/5 (Data processed exclusively in EU data centres (Denmark/Germany). Danish incorporation means EU law governs by default. No US cloud dependency. Maximum data residency for healthcare AI.).

Are Contractbook and Corti GDPR compliant?

Both tools are assessed across five compliance dimensions. Contractbook has a regulatory fit score of 5/5 and Corti scores 5/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool