Contract automation gets risky when the workflow treats extraction as approval.
A safer production structure is extraction first, routing second, human decision last.
The workflow pattern looks like this:
INPUT
- Google Drive trigger watches a contract folder
- New contract file is passed into the workflow
- The file and metadata move together through the workflow
EXTRACTION
- Contract type
- Parties
- Effective date
- Expiration date
- Auto-renewal terms
- Payment terms
- Termination notice days
- Liability limitations
- High and medium risk flags
SUMMARY
A second pass generates a short executive summary and the top things a signer should review.
This is useful, but it should not be treated as final judgment.
ROUTING
The important logic happens after extraction:
- high risk count above zero means legal review needed
- multiple medium risks means review recommended
- no major risks means ready for normal review
That routing layer is what prevents the workflow from becoming a black box.
OUTPUT
- Google Sheets stores the structured review row
- Slack sends the review report
- the original contract link stays attached
- the human reviewer still decides what happens next
The reusable lesson:
Do not ask an AI workflow to be right all the time.
Ask it to prepare the review surface and know when to escalate.
For document automation, the safest architecture is usually:
extract, validate, route, log, then approve.
Where do you usually put the human review step in your n8n workflows: before routing, after routing, or only on exceptions?