Company
A platform forged through necessity.
In 2018 a group of technologists came together, tired of software projects that were slow, clunky and expensive. Toca is what they built instead: a way to make digital transformation faster, more affordable and open to organisations of every size.
Who we are
Grown across healthcare, legal and accounting.
Since 2018 we have grown across healthcare, legal, RegTech, accounting and other industries in the UK and the US. Today NHS trusts, the UK's busiest law firms and payroll for 1,750 schools run on Toca. We are backed by experienced technology investors who are themselves leaders in global technology firms, and with our partner community we keep pushing what organisations can build, and getting their ideas to market faster.
Our passion for customers fuels our innovation, delivering them with the speed they need to win.
- Founded
Incorporated on 4 June 2018 as Tocalabs Limited, trading as Toca.
How we work
Accountable for every line of code.
Exceptional teams drive innovation. We champion diversity, back each other whether or not we write code, and hold ourselves to account for every customer project, so what we promise is what you get.
- Together we code
Developer or not, everyone here works in a culture of support, success and collaboration.
- Delivering great results
Every line of code and every customer project is ours to answer for. We build it, and we deliver on our promises.
- Disrupting the status quo
We go looking for better ways of working, and for the potential technology has not yet unlocked.
- Tech evolves, so do we
We keep our skills ahead of the change, so the platform you run on keeps up too.
- Fixing it together
We celebrate the wins and take on the problems as one team.
Security and assurance
Independently certified, and you can check every certificate.
Certificate numbers, scopes and expiry dates sit on the certification bodies' own registers, so you can verify them rather than take our word for it. Your data is processed for your deployment, under your governance: in our cloud, in your own tenancy or on your own servers.
- ISO/IEC 27001:2022
Information security, certified since March 2019. The scope covers the design and supply of online software automation services, including ISO/IEC 27017 for cloud security and ISO/IEC 27018 for personal data in the cloud. Certificate 312832019, issued by Citation ISO Certification, valid to March 2029.
- Cyber Essentials Plus
The audited tier of the UK government scheme, where an assessor tests the controls rather than accepting a self-assessment. It covers the whole organisation. Certified December 2025.
- ISO/IEC 42001
AI management systems. Among the first teams in the UK to be certified.
- UKCA Class I
Spectral is UKCA-marked as a Class I medical device and registered with the MHRA.
- NHS assurance
The Data Security and Protection Toolkit, completed every year, and DTAC, completed for NHS deployment.
Certificates and the governance pack are available on request. The Cloud Terms of Service, the Privacy Policy and our other policies are on the terms and policies page →
Support
Response times, in writing.
Support is included in every Toca subscription.
Buying Toca
Buy direct, through G-Cloud or through a partner.
However you buy, the first step is the same: twenty minutes on your use case, then a demo of one step running end to end on a system like yours.
- Direct
Talk to the team, agree the scope, and start on one process before you commit to more.
- G-Cloud
Public sector buyers can call off through G-Cloud with a standard Call-Off Contract.
- Through a partner
Service partners such as SolarNet design, build and support Toca solutions for their own clients. Partners
- The terms
Toca Cloud runs under our Cloud Terms of Service; software installed on your own infrastructure under our Software License Agreement.
Customers
Who runs on Toca.
NHS trusts, major volume law firms, a national charity, and businesses in payroll, finance and immigration. All in production, all on the same platform.
Health
Legal
Other sectors
Every customer story → In the NHS? toca.health is written for you. In law? Start with Toca Legal.
Recognition
Reviewed by customers, recognised by the industry.
- A Leader in the G2 Grid for Business Process Management, and recognised by G2 consistently since June 2022. Read the reviews on G2
- Winner, Best DevOps Automation Project 2024.
- Two-time finalist, Thames Valley Tech & Innovation Awards, 2025 and 2026.
- eTriage, built on Toca, referenced in the Health Secretary's NHS ConfedExpo keynote in June 2026.
Responsibility
Tech with conscience.
We are committed to responsible growth: a smaller footprint and more positive change. Our carbon reduction plan is published every year to the government's PPN 06/21 standard. Our emissions fell from 19.9 tCO2e in the 2022 baseline year to 1.35 tCO2e in 2025, helped by a move to carbon-neutral offices in Reading.
- Supporting education for a more thoughtful world.
- One team, endless possibilities: we embrace diversity, equity and inclusion.
Where we are
Reading, Berkshire.
Toca3rd Floor, The Blade
Abbey Square
Reading RG1 3BE
- Sales
- sales@toca.io
- Anything else
- info@toca.io
Find out more.
See how easy it is to build and automate without the hassle of traditional digitisation. Bring a real use case and we will run one step end to end, with the sign-off and audit trail visible.