GOVERNANCE · SUPERVISION, ASSURANCE & DATA
Certified, audited, accountable.
Automation is only worth having if it produces the evidence trail as a by-product. Here’s the paperwork: certifications, the sign-off model, where your data lives, and what supervision looks like in practice.
No fully automated legal decisions
A qualified person approves every step that needs it. Every approval is logged with the source passage, the model versions that assessed it, and who signed off, exportable for SRA file reviews, costs challenges, or your professional indemnity broker.
ISO 42001
AI management. One of the first UK companies to be certified.
ISO 27001
Information security management, audited across the platform.
Your tenancy
Cloud, on-premise or fully air-gapped. Never trained on your documents.
HOW A FINDING IS MADE · CONSENSUS VALIDATION
Two models have to agree. Where they don’t, a lawyer decides.
Everything Spectral extracts is assessed by more than one model. Where they disagree, the finding stops and goes to a lawyer with the disagreement shown, not averaged away or quietly resolved. Every finding carries the page it came from, so reviewers check the source rather than trusting a summary. Nothing reaches a file without someone putting their name to it.
WHY THIS MATTERS NOW · SUPERVISION ON VOLUME FILES
Proof, file by file, of who approved each step.
Since Mazur, the position on volume litigation has tightened: only an authorised person may conduct litigation, and they need to retain genuine control over the key steps. Wherever your firm draws that line, the evidence question is the same, and on a volume file it is a hard one to answer by hand. Toca answers it automatically: on every step, the approval, the approver and the passage behind it are recorded and can be exported.
DATA · WHERE IT LIVES AND WHERE IT DOESN’T
Your documents, your tenancy, your record.
Models run in your cloud tenancy, on-premise, or fully air-gapped, and are never trained on your documents. Your CMS remains the system of record; Toca reads from it and writes back to it rather than holding a second copy. The full assurance pack, including the DPIA template, sub-processor list, and penetration test summary, is available on request.
Get the full assurance pack.
Certifications, DPIA template, sub-processor list, and hosting options, sent the same day.