WorkflowResearch Administration & Compliance

Research Contract Review

Research contract review that drafts the redline from your own playbook, cites every rung and waits for the right approver

Policy-based redlines the same day, and every deviation approved and logged.

See one case, screen by screen ↓
demo40minutesfrom arrival to a full redline of a 14-clause data use agreement, on the sample day
demo1 of 14clausesneeded the negotiator's decision; the rest were drafted and routed by the agents
demo4 of 4elementsof FERPA's written-agreement test found and cited to their clauses
target100%of deviations approved by the right person before a redline is sent, and logged
In short

What is Research Contract Review?

Research contract review is the work a university's research contracts office does on every data use agreement, material transfer agreement, sponsored research agreement and confidentiality agreement: reading the other party's terms clause by clause against the university's negotiation playbook, drafting a redline and getting each deviation approved. Research Contract Review puts six agents in front of that work: they place every clause on the playbook's ladder with the policy line cited, draft the redline at the nearest acceptable rung, and route each deviation to the person who must approve it.

AI in education: a buyer's guide to agentic AI for colleges, universities and school districts →

Updated

The problem

Why research contract review takes weeks, not days

Research contract review is the clause-by-clause work behind every new study, dataset or industry collaboration: a data use agreement to receive data, a material transfer agreement to receive or send research materials, a sponsored research agreement for industry-funded work, a confidentiality agreement to talk about it. Each arrives on the other party's paper. A contract negotiator rereads every clause against a playbook kept in a document or in memory, emails the IRB and the data security office, writes the redline in a word processor and waits days for the associate director or the general counsel's office to approve any deviation.

Meanwhile the data terms drift apart — the agreement says destroy the data in 30 days, the IRB protocol says keep it 7 years — and a public university's limits on indemnity, governing law and public records slip through or wait weeks for counsel. Fallbacks are accepted by email, so nobody can later say who approved which deviation, on what precedent. Research Contract Review puts six agents in front of the reading and drafting, so the negotiator spends her afternoon on the one clause that needs her.

typical4–6weeksfor a typical data use agreement, as a university publishes it, longer when terms are negotiated
typical2weeksminimum from submission to signature, published by another research office
typical11.3daysaverage for incoming material transfer and data use agreements at a research office that publishes its numbers
Where a data use agreement's business days goestimated
By hand21 days
With the solution0.4 days
  • Waiting for a negotiator, then reading the agreement and splitting it into clauses4 → 0.1 d
  • Comparing every clause with the negotiation playbook3 → 0.1 d
  • Getting the IRB protocol and the data security plan, and checking FERPA6 → 0.1 d
  • Writing the redline and the cover note3 → 0.1 d
  • Approvals from the associate director and counsel5 → 0.1 d

Estimated split of a typical data use agreement's business days to a first redline, by hand and with the agents; the by-hand total sits at the low end of the published 4 to 6 weeks. In the working solution the sample agreement went from arrival to sent in 78 minutes. Our arithmetic, kept modest.

How it works

How each research agreement is reviewed and redlined

Six agents place every clause on the policy ladder, draft the redline, cross-check the IRB protocol and route approvals; people decide.

What comes in
Agreements in4 agreement types · data use, material transfer, sponsored research, confidentiality
Agents at work
Reader agenttype, parties, clauses, links
Then
Clause agentevery clause on the policy ladder
Cross-Check agentIRB protocol, security plan, FERPA
Then
Precedent agentwhat this counterparty accepted
Drafter agentredline at the nearest acceptable rung
Then
Routing agentapprovals by rung and clause type
A person decides
Negotiator, associate director and counselthe negotiator decides walk-away rows · the associate director approves fallbacks · counsel approves legal terms
What comes out
Redline sent the same day
Every deviation approved
Audit trail and export pack
One case, step by step

One data use agreement through research contract review, arrival to send

DUA-26-1187 arrives at Halden State University on Tuesday, October 20, from the State Department of Education: 11 pages, 14 clauses, on the department's own form. Here is what happens to it, screen by screen, in the working solution.

  1. 011:52 p.m.

    A data use agreement arrives on the department's own form

    Reader agent

    The department shares student-level records for the 2017 to 2024 high school graduating cohorts, about 412,000 students, for the Dual Enrollment and College Completion Study under FERPA's studies exception. The Reader agent identifies a data use agreement at 0.99, links IRB protocol 2026-0418, data security plan DSP-26-077 and award HSU-SP-26-0388, and starts the first-redline clock, due November 3.

    23 agreements arrived today, 104 this week, about 5,200 a year.

  2. 022:32 p.m.

    Fourteen clauses on the policy ladder, one of them lit

    Clause and Drafter agents

    Each clause is a row on the four-rung ladder of Halden's Research Agreements Playbook, RC-7 version 12: Preferred, Fallback 1, Fallback 2, Walk-away. The sponsor's language is marked on its rung, the drafted redline's rung is ringed, and the row says who decides. The full redline is drafted 40 minutes after the agreement arrived.

    8 Preferred · 3 Fallback 1 · 2 Fallback 2 · 1 Walk-away

  3. 032:44 p.m.

    Clause 9: an indemnity a public university cannot give

    Priya Okonkwo-Hale · Contract Negotiator

    Clause 9 asks Halden to indemnify, defend and hold harmless the Department. Contracting Policy RC-4 §3.2 says Halden, as an agency of the state, may not indemnify another party, so the Clause agent places it on Walk-away at 0.97. The Drafter wrote the redline at Fallback 2 — Halden is responsible for claims arising from its breach of Sections 5 and 12, to the extent the State Tort Claims Act permits, without waiving sovereign immunity — and Priya uses it.

    The Precedent agent: this department accepted Fallback 2 in 5 of 6 earlier agreements.

  4. 04Three documents

    The agreement, the IRB protocol and the security plan, term by term

    Cross-Check agent

    The Cross-Check agent compares 8 data terms across the agreement, IRB protocol 2026-0418 and data security plan DSP-26-077, every cell cited. Six match. Exhibit B names 4 authorized users where the protocol lists 5, so the redline adds graduate assistant Kai Nakamura. Retention conflicts: clause 6 destroys all data within 30 days of the project's end, while the protocol keeps the identifiable linked file 7 years.

  5. 052:49 p.m.

    The fix goes on the side that is wrong

    Owen Takeda · IRB Analyst

    The agent proposes two fixes and recommends amending the protocol: identifiable data destroyed within 30 days of the project's end, the de-identified file kept 7 years, because the department refused longer retention in 4 of 4 earlier agreements. Only the IRB analyst can confirm it; Owen files modification MOD-2026-0418-02 and the PI is told. The FERPA written-agreement test shows all four elements, each cited to its clause.

  6. 062:52 p.m.

    Four fallbacks approved, each with its rung and precedent

    Theo Marchetti · Associate Director of Research Contracts

    Theo's queue shows each fallback with the sponsor's rung, the redline rung, the drafted language and what this department accepted before: additions to authorized users by notice in 5 of 6, 30-day destruction in 6 of 6, a 45-day publication review in 5 of 6, 24-hour breach notice in 6 of 6. He approves all four for DUA-26-1187 in one step.

  7. 073:04 p.m.

    Legal terms go to counsel, and only to counsel

    Renata Solis · Associate General Counsel

    Indemnity and public records language reach counsel, not the associate director, and a walk-away row reaches her only after the negotiator has decided it. Renata approves Fallback 2 on clause 9 and Fallback 1 on clause 11, which names the State Public Records Act, wording this department accepted in 6 of 6 earlier agreements.

  8. 083:10 p.m.

    The full redline goes out the same afternoon

    Priya Okonkwo-Hale · Contract Negotiator

    Send stays off until the checklist is complete: the walk-away clause decided, 6 of 6 deviations approved, the IRB protocol amended to match clause 6, and FERPA's elements 4 of 4. Priya sends the redline with a cover note that explains every change in plain words to Marisol Duarte, Data Governance Manager at the department.

    Sent to Marisol Duarte at 3:10 p.m., drafted in 40 minutes. First-redline SLA met with 9 business days to spare.

  9. 09When the department agrees

    One record, and a one-page deviation summary before signature

    Dr. Samuel Achterberg · authorized signatory

    The agreement's record holds the timeline from receipt to send, every version, and the linked IRB protocol, security plan and $640,000 award that starts January 1, 2027. When the department agrees, Dr. Achterberg signs through the e-signature system with the deviation summary in front of him: each of the six deviations, who approved it and when.

  10. 10Audit-ready

    Who decided what, on which evidence

    Kendra Voss · Internal Audit

    Every placement, redline, approval, amendment and send is on the audit trail, for agents and people alike, and so is a refused action: confirming the IRB protocol amendment belongs to Owen Takeda, and the attempt by anyone else is refused and logged. Kendra reads and exports; she can build a redacted export pack for internal audit or the state agency.

Who it’s for

Built for everyone who touches a research agreement.

The same data use agreement, seen by the five people who carry it — what their day looked like, and what it looks like now.

PO
Priya Okonkwo-HaleContract negotiator · 31 open agreements, mostly data use and material transfer
Contract Negotiator
Before
Rereads every clause of the other party's paper against the playbook, emails the IRB and the security office, and writes the redline by hand.
Now
Opens the ladder, decides only the walk-away rows, and sends a redline the agents drafted in the playbook's own language.
TM
Theo MarchettiAssociate director · approves every fallback the negotiators accept
Associate Director of Research Contracts
Before
Approves fallbacks from email threads, without the rung in front of him or the last time the office gave the same ground.
Now
Sees each fallback with its rung and this counterparty's precedent, approves an agreement's fallbacks in one step, or returns one with a reason code.
RS
Renata SolisAssociate general counsel · indemnity, governing law, public records and insurance
Associate General Counsel
Before
Hears about indemnity and public records clauses late, or after they have slipped through.
Now
Receives only legal terms, with a public university's state-law limits built into the ladder as walk-away rungs, cited to the contracting policy.
OT
Owen TakedaIRB analyst · keeps protocols and agreements telling the same story
IRB Analyst
Before
Learns that an agreement and a protocol disagree on retention at audit time, or not at all.
Now
Sees the agreement, the protocol and the security plan side by side, and confirms the amendment the agent proposes.
LB
Lorraine BatisteDirector · owns the playbook, the SLAs and the team's queue
Director of Research Contracts
Before
Runs about 5,200 agreements a year on a playbook kept in a document, with deviations nobody can trace later.
Now
Sees 438 open agreements against each SLA, reassigns in bulk, and changes a rung only with counsel's approval.
Built on the engine

6 agents. Each with one job, and hard limits.

Six agents place every clause on the policy ladder, draft the redline, cross-check the IRB protocol and route approvals; people decide.

Reader agent

Identifies the agreement type — data use, material transfer, sponsored research or confidentiality — with the parties, term and template, splits it into clauses, and links the IRB protocol, data security plan and award.

  • Below 0.95 on type, asks a negotiator
  • Never opens the data itself
Clause agent

Places each clause on the playbook's ladder for its clause type and cites the policy line behind the rung.

  • Below 0.85, marks the row "needs a person"
  • Never accepts a walk-away
Drafter agent

Writes the redline at the nearest acceptable rung, with a plain-language note for each change and a cover note for the other party.

  • Uses only approved rung language
  • Never sends
Cross-Check agent

Compares the data terms with the IRB protocol and the data security plan, tests FERPA's written-agreement elements, and proposes the fix on whichever side is wrong.

  • Proposes; the IRB analyst or the negotiator decides
  • Never changes a protocol
Precedent agent

Finds how the same counterparty settled each clause before, with each earlier agreement cited.

  • Executed agreements only
  • Always shows its sources
Routing agent

Routes approvals by rung and clause type, keeps the SLA clock, and prepares the signatory's one-page deviation summary and the e-signature package.

  • Never approves, sends or signs
Negotiator, associate director and counsel

Decide, approve, send. The agents propose; a named person decides.

Ask in plain words

Ask about any agreement, clause or rule

Ask about any agreement, clause or rule, in plain words. Every answer points to the clause, the protocol or the policy line it came from.

Why is clause 9 walk-away, and what did you draft?

Clause 9 asks Halden to "indemnify, defend and hold harmless the Department". Halden, as an agency of the state, may not indemnify another party under Contracting Policy RC-4 §3.2, which is the walk-away rung of the indemnification ladder. The Drafter wrote the redline at Fallback 2: Halden is responsible for claims from its own breach of Sections 5 and 12, as the State Tort Claims Act allows. This department accepted Fallback 2 in 5 of 6 earlier agreements.

Does this agreement match the IRB protocol?

Almost. Of 8 data terms, 6 match. Exhibit B names 4 authorized users and the protocol lists 5, so the redline adds Kai Nakamura. Clause 6 destroys the data in 30 days and protocol §8.3 keeps it 7 years; amending the protocol is proposed, and Owen Takeda decides. Security matches the Level 3 plan.

What does FERPA require in this agreement?

Because the department shares student records with Halden for a study done for it, the studies exception applies, and it needs a written agreement with four things: purpose, scope, duration and the data (clauses 1, 2 and 4); use only for that purpose (clauses 1 and 3); no identification of students outside the team (clauses 3 and 8); destruction when no longer needed, with the time period (clause 6). All four are present.

Why do state agencies push indemnity past walk-away?

Their own forms are written for vendors, who can indemnify; a public university cannot. This quarter 38 of 93 state-agency data use agreements arrived with it, and 34 closed at Fallback 2.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Every clause of a data use agreement on the university's policy ladderThe data use agreement from the State Department of Education opens as one row per clause, each on a four-rung ladder of Preferred, Fallback 1, Fallback 2 and Walk-away, with the sponsor's language marked on its rung, the drafted redline beside it and who decides. 8 Preferred, 3 Fallback 1, 2 Fallback 2 and 1 Walk-away, which is the only row lit.
The negotiator's desk: only the decisions that need herThe negotiator's home shows the agreements with walk-away clauses, such as a sponsored research agreement whose sponsor wants approval over publication, nine confidentiality agreements fully on Preferred and ready to send in one step, sponsor replies already re-placed by the agents, and what is due this week.
Every arriving agreement identified, linked and on the clockAs data use, material transfer, sponsored research and confidentiality agreements arrive by email or from the research administration system, the Reader agent identifies the type, links the protocol, plan and award, and starts the first-redline clock. An unreadable scan goes to a person with a Retry.
A walk-away indemnity clause, redlined at the nearest acceptable rungClause 9 asks the university to indemnify the department, which Contracting Policy RC-4 §3.2 bars for a public university. The negotiator sees the sponsor's text, the indemnification ladder with every rung cited, the drafted redline at Fallback 2 and a plain-language note, and decides.
Data use agreement terms checked against the IRB protocol and the security planThe Cross-Check agent compares the agreement with IRB protocol 2026-0418 and data security plan DSP-26-077, term by term, every cell cited: 8 terms, 6 match, 1 user to add and 1 conflict on retention.
The fix proposed by the agent, confirmed by the IRB analystFor the retention conflict the agent proposes two fixes and recommends amending the protocol; only the IRB analyst can confirm it. The FERPA written-agreement test under the studies exception shows all four required elements, each cited to its clause.
Fallbacks approved by the associate director, with rung and precedentEvery fallback the agents drafted, grouped by agreement, with the sponsor's rung, the redline rung, the drafted language and what this counterparty accepted before. Approve one, approve all for an agreement, or return one with a reason code.
Legal terms routed to counsel onlyIndemnity, governing law, public records and intellectual property go to the Office of General Counsel, and walk-away rows wait until the negotiator has decided them. The associate director cannot approve them.
The contract redline sent the same afternoon, every deviation approvedThe agreement with tracked changes and a plain note on each change, a clean copy and the sponsor's original, the send checklist and the cover note drafted for the sponsor. Send stays off until every item is ready.
The agreement's record: timeline, documents, linked records and signatureOne record holds where the agreement stands, every version, the linked IRB protocol, security plan and award, and the one-page deviation summary the authorized signatory sees before signing.
The research contracts office: queue by type, SLA, team and escalationsThe director sees open agreements by type against each first-redline SLA, the team's load with bulk reassignment, escalations past SLA with what each waits on, and which clauses sponsors most often push to walk-away.
The contract playbook the agents use, governed by counselThe research agreements playbook holds four rungs per clause type for data use, material transfer, sponsored research and confidentiality agreements, with a public university's state-law limits on indemnity, governing law and public records. The director proposes a change and counsel approves a new version.
Every placement, decision, approval and send on the recordWho did what, when, why and on which evidence, for agents and people alike, including refused actions, with CSV export and redacted export packs for auditors and the state agency.
Governance

Research contract review with every deviation approved, cited and on the record.

Eight roles, separated by dutyThe negotiator decides walk-away rows, edits and sends; the associate director approves fallbacks on business terms; counsel approves legal terms and playbook changes; the IRB analyst confirms protocol amendments; the director proposes playbook changes and runs the queue; the signatory signs; the administrator changes settings only; the auditor reads and exports.
Nothing is sent until every deviation is approvedSend stays off, with the reason shown, until every deviation has its approver. The negotiator can never approve her own deviation, the associate director cannot approve legal terms, and every refused action is logged.
Agents propose; people decideThe agents never approve, send, sign or change a protocol. The Drafter uses only the playbook's approved rung language, never free-form legal text, and below each agent's confidence threshold the row goes to a person.
Every rung cited to your playbookEach placement cites the policy line behind its rung, and a public university's limits on indemnity, governing law and public records are walk-away rungs cited to the contracting policy. A rung change is proposed by the director and approved by counsel as a new version.
FERPA-aware access, retention and redactionAgreements that share student records are visible to the contracts office, counsel, the PI and the IRB only. The agents read agreements, protocols and plans, never the student data. Exports redact personal contact details and signatures, and executed agreements are kept 6 years after they end, or 3 years after the award's final report if longer (2 CFR 200.334).
A complete audit trail, with export packsWho, what, when, why and which evidence, for every placement, redline, approval, amendment, send, signature and export, with each agent's prompt version and confidence. Overrides need a reason code, and redacted export packs go to internal audit, the state agency or a federal reviewer.
Configuration

Your playbook and your routing, not ours

SLAs, approvers, thresholds and retention are settings, saved as a new version and logged. The ladders themselves change only with counsel's approval.

SettingDefaultChoose from
First redline · data use agreements10 business daysSet per type: confidentiality 2, material transfer 5, sponsored research 15
Approvals by the associate director and counsel1 business dayEscalate to the director 2 days past SLA; remind the sponsor after 5 business days without a reply
Who approves a deviationBusiness-term fallbacks: associate director · legal terms: counselPreferred needs nobody; walk-away goes to the negotiator first
Two approvers for sponsored research over $1 millionOnOn · Off — the associate director and counsel
Edited language always goes to counselOffOn · Off — when the negotiator writes beyond the rung
Send fully Preferred confidentiality agreements without a queueOnOn · Off — the negotiator still sends; no approver needed
Agent confidence thresholdsReader 0.95 · Clause 0.85 · Cross-Check 0.90 · Precedent 0.800.80 · 0.85 · 0.90 · 0.95; below it, the row goes to a person
Keep executed agreements6 yearsAfter the agreement ends, or 3 years after the award's final report if longer (2 CFR 200.334)
Connections

Works with the systems a research contracts office already runs on

Research administration systemthe agreements module: requests in; status, versions and the executed copy back
Contracts inboxagreements that arrive by email
IRB electronic submission systemprotocols read; amendments filed by IRB staff
Document managementversions, executed agreements and the precedent behind each clause
E-signature systemsignature packages with the one-page deviation summary
Policy librarythe research agreements playbook and the state contracting policy
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

estimated
Sameday
first redline for a data use agreement, sent the afternoon it arrived
Typical4–6 weeks
With agentssame day
estimated
1of 14
clauses needed the negotiator's decision in the demo agreement
Only walk-away rows
the other 13 drafted and routed
target
100%
of deviations approved by the right person before anything is sent
Every deviation approved
6 of 6 in the demo agreement

Sources: a university library's published data use agreement guidance (4 to 6 weeks for a typical agreement) · university research office pages (a two-week minimum from submission to signature; an 11.3-day average for incoming material transfer and data use agreements) · FERPA studies exception, 34 CFR 99.31(a)(6) · 2 CFR 200.334 (records retention) · "target" = design goal, measured in the live solution · "demo" = seen in the working solution, on its sample data · "typical" = published figures · "estimated" = our arithmetic from published inputs. Halden State University, the State Department of Education, the companies, agreements and people named on this page are fictional — characters and sample data in the working solution.

Questions

What research contracts offices ask us.

What is research contract review?

Research contract review is the work a university's research contracts office does on every data use agreement, material transfer agreement, sponsored research agreement and confidentiality agreement: reading the other party's terms clause by clause against the university's negotiation playbook, drafting a redline and getting each deviation approved. Research Contract Review puts six agents in front of that work: they place every clause on the playbook's ladder with the policy line cited, draft the redline at the nearest acceptable rung, and route each deviation to the person who must approve it.

What is a data use agreement in research?

A data use agreement is the contract under which a researcher receives data from another party, such as a state education agency sharing student records for a study. Under FERPA's studies exception, the written agreement must state the purpose, scope, duration and information disclosed, limit use to that purpose, bar identification of students by anyone outside the study, and require destruction with a time period. The Cross-Check agent tests those four elements and cites each to its clause.

How long does a data use agreement take?

Universities publish 4 to 6 weeks for a typical data use agreement, longer when terms must be negotiated. In the working solution, the sample agreement was fully redlined 40 minutes after it arrived and sent at 3:10 p.m. the same afternoon, with every deviation approved.

Does it handle material transfer and sponsored research agreements too?

Yes. The playbook holds four-rung ladders for data use, material transfer, sponsored research and confidentiality agreements, and the Reader agent identifies which type arrived. A sponsor's right to approve publication is walk-away, because it would end the fundamental research exclusion for export control, and confidentiality agreements that sit fully on Preferred are ready to send in one step.

Does the AI send, approve or sign an agreement on its own?

No. The agents read, place, draft, cross-check and route; they never approve, send, sign or change an IRB protocol. The Drafter uses only the playbook's approved rung language, and below each agent's confidence threshold the row is marked for a person.

Do people stay in control of every deviation?

Yes. The negotiator decides walk-away rows and sends; fallbacks on business terms go to the associate director, legal terms to counsel, and protocol amendments to the IRB analyst. The negotiator can never approve her own deviation, and Send stays off until every deviation is approved.

Can we use our own contract playbook?

Yes. The ladders are your playbook's own rungs and language, cited on every placement. The director proposes a rung change and counsel approves it as a new version; SLAs, approval routing, thresholds and retention are settings, and each change is logged.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your playbook, your templates and a sample of executed agreements — and it goes live once every quality gate has passed. We will walk you through it on your own agreements first.

See it on
your agreements.

We'll run Research Contract Review on a sample of your own agreements and your negotiation playbook.