GOVERNANCE · SUPERVISION, ASSURANCE & DATA
Certified, audited, accountable.
Automation is only worth having if it produces the evidence trail as a by-product. Here’s the paperwork: certifications, the sign-off model, where your data lives, and what supervision looks like in practice.
No fully automated legal decisions
A qualified person approves every step that needs it. Every approval is logged with the source passage, the model versions that assessed it, and who signed off, exportable for SRA file reviews, costs challenges, or your professional indemnity broker.
ISO 42001
AI management. One of the first UK companies to be certified.
ISO 27001
Information security management, audited across the platform.
Your tenancy
Cloud, on-premise or fully air-gapped. Never trained on your documents.
HOW A FINDING IS MADE · CONSENSUS VALIDATION
Two models have to agree. Where they don’t, a lawyer decides.
Everything Spectral extracts is assessed by more than one model. Where they disagree, the finding stops and goes to a lawyer with the disagreement shown, not averaged away or quietly resolved. Every finding carries the page it came from, so reviewers check the source rather than trusting a summary. Every approval is logged with who signed it off.
WHY THIS MATTERS NOW · SUPERVISION ON VOLUME FILES
Proof, file by file, of who approved each step.
Since the Court of Appeal’s Mazur ruling in March 2026, your team can do litigation work under the direction and control of an authorised person, who stays responsible for it, and the SRA’s June 2026 guidance expects you to show that supervision. On a volume file that is hard to show by hand. Toca answers it automatically: on every step, the approval, the approver and the passage behind it are recorded and can be exported.
DATA · WHERE IT LIVES AND WHERE IT DOESN’T
Your documents, your tenancy, your record.
Models run in your cloud tenancy, on-premise, or fully air-gapped, and are never trained on your documents. Your CMS remains the system of record; Toca reads from it and writes back to it rather than holding a second copy. The full assurance pack, including the DPIA template, sub-processor list, and penetration test summary, is available on request.
FAQ · CONFIDENTIALITY, DATA AND PROCUREMENT
Common questions.
What about privileged material?
Processed in place under your access controls. Nothing leaves the firm.
Do you train models on our documents?
No. Models are fixed, versioned artefacts.
Does anything reach the file without a lawyer?
Only where the model jury is unanimous and your firm has set a threshold allowing it. You control the thresholds, per function.
Does this replace our CMS?
No. Spectral reads the documents you hold and writes findings back into the system you run.
What do we need to start?
Access to your documents and somewhere to write findings. If your CMS has an API we use it; if not, Toca works through the application’s own screens.
Get the full assurance pack.
Certifications, DPIA template, sub-processor list, and hosting options, sent the same day.