ANEXSYS LIMITED

eDisclosure (eDiscovery) SaaS Services (Data Management)

Our eDiscovery platforms accelerate eDisclosure by integrating automated processing and review tools. Leveraging AI features, our platforms quickly identify and redact personal data for GDPR compliance, reducing mundane tasks. Benefits include improved defensibility, enhanced compliance, and reduced review time, potentially achieving up to 90% faster processing of high volumes.

Features

• AI-driven data discovery and classification efficiently remove manual process requirements.
• Automated redaction of PII from native files, including Excel workbooks.
• Full indexing of text, images, metadata supports threading and searching.
• Technology Assisted Review uses ML, concept clustering, and predictive coding.
• Data deduplication, email threading and filtering cull data sets efficiently.
• Configurable access controls based on user roles ensure data security.
• Fully audited system allows identification and tracking of user activity.
• Automation manages and tracks DSAR cases and necessary resources.
• Production features meet local and global legal standards for disclosures.
• Audio and video file transcribing capabilities.

Benefits

• Protect confidential, personal, and privileged information to meet legal obligations.
• Improve defensibility of process and disclosures, reducing reputational damage risk.
• Significantly reduce resource costs for legal document review.
• Defensibly cull and filter data to reduce hosting costs.
• Increased quality of responses through repeatable, standardised, defined processes.
• Free valuable human resources to complete high value intelligence work.
• Provides one single view of project status and overall performance.
• Visual analytics brings early intelligence, assisting effective case strategy development.
• Conduct reviews using AI, human teams, or a hybrid approach.
• Offers high-speed cloud collections, data uploads and ingestion

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@anexsys.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

401436163556999

Contact

Rob Crowley
07527 384 123
tenders@anexsys.com

About the service

• Service categories:
  • Application Development and Deployment
    • Data management
      • Database management systems
        • Document-Oriented Database Systems
      • Data integration and intelligence
        • Data Ingestion and Transformation Software
        • Dynamic Data Movement Software
        • Data Quality Software
        • Data Access Infrastructure Software
        • Composite Data Framework Software
        • Master Data Intelligence Software
        • Metadata Management Software
        • Data Archiving and Information LifD-Cycle Management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: A key advantage of our service is the flexibility to schedule client-specific maintenance windows well in advance and to postpone them around busy times or deadlines. Planned downtime for significant changes is agreed at least 4 weeks in advance, with scheduled extended downtime windows lasting less than 2 hours each. Annual maintenance and update windows are determined and communicated well in advance.
• System requirements:
  • At least four cores and 8GB RAM for optimum performance
  • Any currently supported Windows OS running Edge v79+ (Chromium-based)
  • Any currently supported Windows OS running Google Chrome
  • Any currently supported Mac OS X supporting Safari
  • Any currently supported Mac OS X supporting Chrome

User support

• Email or online ticketing support: Yes
• Support response times: Our core support hours are Monday to Friday, 08:30 to 18:30. Users can log support requests using our ticketing facility 24/7. Outside of office hours, we typically provide an initial response to support requests within three hours in the evening, with overnight requests actioned the following day. We also offer enhanced support hours covering weekends and bank holidays by prior arrangement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Anexsys delivers supplier support through a structured system featuring dedicated client teams, clear escalation routes, and measurable Service Level Agreements (SLAs) for response and resolution. Our team will support you from scoping and data collection to the processing, review and production. Our complete onboarding process ensures we understand your needs from the outset. You will have direct access to our security-cleared technical project managers. They all have extensive experience, and a large technical team supports them. Our support team can assist with more complex tasks such as creating layouts, search term reports, applying analytics functionality, and creating productions. We will seek your approval for any additional costs for completing complex tasks. Our Head of Public Sector serves as the primary point of contact and account manager. This role is responsible for client success, managing contract governance, tracking budgets and ensuring clients maximise the services offered. Contract governance and ongoing relationship management are led through the processes of our Strategic Client Solutions (SCS) team. The SCS team provides proactive service management, including biannual reviews, monthly reporting (such as storage usage reports and budget tracking) and making technology recommendations.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our onboarding process starts with a kick-off meeting where we agree on the ordering and engagement process, key contacts, timelines, design templates and workflows, define security arrangements and agree on milestones. We also analyse existing skills within your team and determine what levels of training will be required. We then arrange online or face-to-face training using dummy data. We support all our training with comprehensive user guide documentation. We also support each new case with its own engagement process. With any new case, a scoping call will be required to determine data sources, sizes, whereabouts, and requirements specific to the case, such as de-duplication and search criteria. We will use previously agreed, bespoke templates to set up your new workspace, applying case-specific adjustments as required. We will also provide further training on the specific workspace at this stage so that reviewers are introduced to their case-specific data and workflows.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
  • Other
• Other documentation formats: MP4
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We discuss the accessibility requirements of your user base with you and agree on bespoke solutions for every contract. Following these discussions, our existing documentation can be adapted or new documentation created, keeping the audience's accessibility needs in mind. The platform natively supports browser-level accessibility features such as high contrast displays and large fonts. This can be supported through user-level configurations, such as implementing dark mode for light sensitivity or changing highlight colour sets for colour-blind users. While the core vendor documentation is in English, we routinely enhance and customise client-specific documentation, including instructions, presentations and videos, translating these to meet the needs of non-native English speakers. For video content, our integration with AWS Transcribe offers automatic subtitling capabilities for audio and video files. Written documentation can be offered in large fonts and/or high-contrast formats to support those with visual impairments. We use multiple media types in our knowledge transfer programmes, so providing users with the ability to choose the medium that is most accessible for them.
• End-of-contract data extraction: We offer various closure options. We can export the entire database, including all the files and transmit these via sFTP. Data can then be restored in the future if required. Similarly, we can export the documents with the agreed metadata on an encrypted hard drive. Finally, we can delete all data. We also have options for the source data initially supplied for processing. Such source data can be stored for an agreed period, copied and returned, or deleted from our systems. We will only delete the data from our servers once you have confirmed that you can access your archive. We use forensically sound deletion processes, rendering data irretrievable from our systems.
• End-of-contract process: Our case closure letter, issued in advance, outlines all available options and associated costs clearly. Options such as archiving, exports or extended data storage are priced on a sliding scale based on case size, providing visibility of what is included and what may incur additional charges. Deleting all project data from our systems is free of charge, and once completed, we provide a formal certificate of destruction for your records.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our ability to offer a wide range of commercial and proprietary platforms gives us the flexibility to provide eDiscovery across a broad range of platforms. We will work with you during onboarding to understand your unique access needs and propose the platform or platforms that deliver against those requirements. Our range of software includes desktop-first, mobile-first, and location-agnostic platforms that provide the best of both.
• Service interface: Yes
• Description of service interface: Our platforms offer comprehensive, intuitive platforms for document reviews, enhancing eDiscovery processes. These cloud-hosted solutions feature customisable workspaces, user-friendly interfaces with drag-and-drop uploads, and strong self-service capabilities. Users can easily navigate large datasets, applying codes and redactions while benefiting from real-time dashboards, analytics, and extensive reporting tools. Streamlined design minimises training burdens, enhances productivity, and provides transparency across matter portfolios, enabling effective decision-making and efficient handling of inquiries like DSAR and FOIA. Each platform empowers legal professionals to focus on their core tasks with minimal fuss.
• Accessibility standards: None or don’t know
• Description of accessibility: By offering a variety of platforms, we are able to offer the best solution to meet many accessibility needs. Many of our platforms feature WCAG 2.1 AA and ADA certifications. All include a wide range of customisations that can be implemented at the user-level, to support specific needs. Examples include forcing high-contrast or dark-mode, custom highlighting colours (or replacing colours with patterns for fully colour-blind users) and comprehensive screen-reader support. Being browser-based, all our platforms also fully support OS-level aids including magnification windows and braille displays.
• Accessibility testing: For our proprietary platforms, our development team uses Web Content Accessibility Guidelines (WCAG) Checklists to test accessibility standards following any development activity. We require that our commercial partners do the same. Many of our platforms hold WCAG or ADA certifications, both of which require testing during the assessment process. With over a decade of experience in eDiscovery implementations spanning the globe, we have supported thousands of users in productively accessing our platforms through customisations that ensure equitable access and use.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: All our platforms support API access. We routinely create custom solutions that integrate third-party systems into our platforms and workflows. Routine integrations include Microsoft systems (including SharePoint, OneDrive, Outlook and Power BI), Google Workspace and storage providers like Dropbox. We also provide a wide range of integrations to chat platforms, including Slack, Teams and WhatsApp.
• API documentation: No
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: We offer users significant flexibility to tailor the platform to their specific requirements. Users enjoy the freedom to select the optimal review platform for each unique matter, such as Relativity or Reveal, ensuring they always have the right tool for the job while maintaining a unified data management system. This approach democratises access to sophisticated data processing, enabling teams to leverage their preferred legal productivity tools. Furthermore, our AI features are highly adaptable. Users can fine-tune AI models through iterative prompting to address specific legal needs, enabling teams to integrate AI on their own terms. Users retain control over how and where AI accesses their data, ensuring security while deploying the right tools for tasks like pattern discovery or document summarisation. Even within standardised workflows, we maintain the flexibility required to handle unique matter requirements, empowering legal teams to orchestrate their portfolios with intuitive dashboards and customised insights.

Scaling

• Independence of resources: Our service gives you complete control over the physical locations where your data is held, the customisations you use, and the security restrictions you wish to apply. We can provide fully managed hosting solutions within our servers or management services for instances hosted within your infrastructure. Our hosting solutions are backed by our parent company, Consilio, to provide scalable, robust solutions that can seamlessly respond to the greatest demands. Consilio has the largest eDisclosure instances in the world and maintains considerable contingent capacity at all times.

Analytics

• Service usage metrics: Yes
• Metrics types: The platform provides flexible reporting tailored to your needs, covering everything from high-level project statistics (e.g., data volumes processed and documents in review) to granular metrics (e.g., pages reviewed per hour or decision overturn rates). Reports can be delivered graphically and numerically via dashboards, with bespoke scripts for alerts and user-friendly insights. In addition, our Strategic Client Solutions (SCS) team specialises in creating custom reports and delivering any additional metrics beyond standard offerings, ensuring complete visibility of service usage.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: We offer integrated eDiscovery incorporating Relativity, Nuix, Reveal and others.

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data export is managed securely and in line with case and user requirements. User permissions strictly govern the ability to download documents, reports, or print content, and case manager approval is required before enabling these features. For large-scale exports, our team can handle these process or end-users can be guided through how to complete these in-house. Exported data can be delivered via Secure FTP for electronic transfer or provided on encrypted physical media, which can be collected or couriered as needed.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Concordance DAT file (standard legal export)
  • PDF (Single Page and Multi-Page)
  • Natives
  • Text files
  • Images (JPG, TIFF, PNG, etc)
  • Media formats including MP3, MP4 and WAV
  • XML
  • Platform-specific archive formats
  • Image Loadfile (OPT)
  • Loadfile Formats (CSV, HTML, TXT)
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Concordance DAT file (native, text and metadata files)
  • CSV, HTML or TXT loadfiles (native, text and metadata files)
  • Standard files such as Word, Excel and PDF
  • Raw unstructured data such as PST, AD1 and ZIP files
  • OPT files (images)
  • Media formats including MP3, MP4 and WAV
  • Platform-specific archive formats

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: As we have control over hosting, we can offer a range of uptime SLAs to meet your needs. These start at 99.5% of the total number of minutes in each calendar month outside of planned maintenance windows and increase to meet the most demanding requirements. Or we can allow you to take complete control by managing a platform you host within your infrastructure. Our support hours are 08:30 to 18:30, Monday to Friday. Following our initial acknowledgement, you can expect a comprehensive response to low-urgency queries in four business hours, medium-urgency queries in two business hours, and high-urgency queries within one hour, 24/7.
• Approach to resilience: Anexsys is an ISO 27001, ISO 9001 and Cyber Essentials Plus accredited organisation. Our data centres are ISO 27001 and SOC 2 compliant. The processes and security arrangements we have in place (protecting both physical and digital assets) are regularly audited for compliance, internally and externally. We have documented disaster recovery and business continuity procedures. You can view these by request. We provide a completely bespoke approach to resilience, defining the hosting environment and backup regime to meet your unique needs. We have designed our environments for high resilience, implementing multiple layers of redundancy and robust disaster recovery protocols to enable continuous operation outside agreed maintenance windows. Our architectural design utilises redundant systems across primary and secondary UK data centres. Our infrastructure is fully hot-swappable, and all processing systems are on immediate failover for high availability. Resilience is further enhanced by continuous replication and maintaining daily incremental and weekly full backups, with all production data and backups being encrypted. Our infrastructure is highly scalable, ensuring consistent performance even when supporting hundreds of concurrent users.
• Outage reporting: The platform is actively monitored, and in the event of an outage or significant downtime, our in-house infrastructure team will be notified, and project managers will, in turn, issue email alerts to you. Email alerts will contain detailed information regarding our plans to address the issue(s), the root cause, and the expected length of the outage.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access in management interfaces and support channels is controlled by adhering to the Principle of Least Privilege and using Role-Based Access Controls (RBAC). Access is denied by default and granted only when explicitly authorised based on a user’s job function. Permissions are highly granular and flexible, allowing user access to be configured to match the user’s job role. Permissions control which databases and data can be accessed, the ability to import/export data and access to the administrator interface. All actions are immutably logged and fully auditable for accountability. All access granted for troubleshooting is strictly Just-In-Time (JIT) and fully logged.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Anexsys’ policies for handling client data are laid down by our parent, Consilio, and ensure that data and devices are stored securely and protected from unauthorised access while in our possession. We treat all client data as confidential. Our enterprise privacy structures and policies ensure that we meet international, EU and UK privacy regulations. These include the Data Protection Act 2018, the General Data Protection Regulations, the Computer Misuse Act 1990, Part 2 of the Serious Crime Act 2015, the Communications Act 2003, the Regulatory and Investigatory Powers Act 2000, GDPR, HIPAA, ITAR, CCPA, and others. They also include HMG security requirements such as security considerations for protecting OFFICIAL information on a corporate network, the Cloud Security Principles, End User Device security guidance and Browser Security guidance. Compliance with ISO standards ensures that we are committed to meeting your needs and protecting our information and data. Completing regular internal and external audits of our quality and information security management systems is a mechanism to show that we are continually improving and learning.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We have a formal change management process covered under our ISMS policy framework. All ISMS policies, including the change management policy, are reviewed and approved annually by our Information Security Governance Council. The change management process includes internal and external notification protocols based on the change's impact. The relevant personnel approve all changes, test them in a dedicated environment, and implement them into the production/live environment. We have a Change Control Board composed of representatives from various teams, including information technology, application development, information security, and support.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our ISO 27001 Information Security Management System documentation documents the management of our technical vulnerabilities. In summary, measures include maintaining an inventory of assets, ensuring a patching regime is adhered to for all devices, and conducting a monthly vulnerability scan by a third party. We also restrict software installation on all company devices and audit devices regularly. OS patches are applied monthly, and application patches are applied as soon as reasonably possible after they are released by the platform vendor.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our platform's configuration and cloud-based infrastructure allow for controlled, audited and monitored access. We have a 24/7 InfoSec team that monitors all our systems. All processes are monitored and restarted automatically, with all storage being highly available, and appropriate distributed consensus is applied to minimise data loss. Only highly available load balancers are accessible from the internet with specific access controls limiting traffic into the private networks where all activity occurs. Our ISO 27001 Information Security Management System documents all monitoring and support processes.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: We use well-defined incident response procedures, triggered by security alerts and 24/7 monitoring by a security operations vendor. This includes escalation protocols to management and client notification protocols, especially if client data is compromised. Users report incidents via a dedicated email address for non-urgent issues, or directly via telephone during working hours. For complex issues, Anexsys diagnoses the problem and seeks a permanent solution while developing workarounds. The process for providing an incident report is client-specific and timelines depend on the nature of the incident. We secure data first, then provide transparency on the issue and detailed proposals for remediation.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Schellman Compliance LLC
• ISO/IEC 27001 accreditation date: Monday 6 January 2025
• What the ISO/IEC 27001 doesn’t cover: All our services are covered by our ISO/IEC 27001 certification.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: British Assessment Bureau Ltd
• ISO 9001 accreditation date: Wednesday 13 August 2025
• What the ISO 9001 doesn’t cover: All our services are covered by our ISO 9001 certification.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 9986e0a6-b241-4960-8f41-12bf072baecc
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 49743f06-ea2e-449d-a61a-50c1c2a1e8b4
• Other security certifications: Yes
• Any other security certifications:
  • HITRUST certified (CSF V9.3)
  • FedRAMP
  • SSAE-16 SOC 1 and SOC 2
  • ISO 9001 and ISO 14001

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@anexsys.com. Tell them what format you need. It will help if you say what assistive technology you use.