TRUELENS TECHNOLOGY LTD

Truelens - AI Document Assurance & Compliance Platform

Truelens is a cloud-based AI software service that automates the review, assurance and compliance checking of technical documents against regulatory requirements. It helps organisations improve quality, consistency and transparency while reducing manual effort, delays and risk in document-led regulatory, assurance and approval processes.

Features

• AI-powered automated document assessment against defined rules and criteria
• Configurable compliance libraries aligned to regulatory and organisational requirements
• Secure cloud-based document upload, storage and version management
• Objective issue identification with traceable evidence and explanations
• Configurable workflows for review, approval and assurance processes
• Role-based access controls and permissions management
• Full audit trail of document reviews and decisions
• Structured reporting and dashboards for oversight and governance
• API integration with existing document management systems
• Scalable architecture supporting multiple projects and users

Benefits

• Reduces time spent on manual document reviews
• Improves consistency and objectivity of compliance assessments
• Increases confidence in regulatory and assurance decisions
• Reduces risk of missed issues and non-compliance
• Provides clear audit evidence for assurance and governance
• Enables faster project approvals and decision-making
• Supports standardisation across teams and organisations
• Improves transparency for internal and external stakeholders
• Scales easily without increasing operational overheads
• Supports digital transformation of assurance and compliance processes

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at felipe.manzatucci@optimabi.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

416661501383605

Contact

Felipe Manzatucci
07791341927
felipe.manzatucci@optimabi.co.uk

About your service

• Service categories:

  Application Development and Deployment

  AI platforms

  AI software services

  • Document AI Software Services
  • Anomaly Detection AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Truelens is delivered as a standardised public cloud SaaS service and is accessed via a modern web browser. On-premise deployment available via Docker. Planned maintenance windows are scheduled during off-peak hours (23:00-02:00 GMT) with 48-hour advance notice. System availability targets 99.5% uptime excluding scheduled maintenance. Users are notified via email and in-app notifications of any planned maintenance. The service requires internet connectivity and does not support offline use. Customisation is configuration-based rather than bespoke code changes. Support is provided remotely and does not include on-premise deployment or support for legacy, unsupported browsers or operating systems. Data residency is UK based.
• System requirements:
  • Modern web browser supporting current security standards
  • Reliable internet connection with standard corporate firewall access
  • User device capable of secure web application access
  • PDF document format supported for upload
  • Organisation-managed user authentication credentials
  • Email access for notifications and user communications
  • No local software installation required
  • Antivirus software on user devices recommended
  • Screen resolution suitable for web-based dashboards
  • API access requires HTTPS and token-based authentication

User support

• Email or online ticketing support: Yes
• Support response times: Within 24hrs.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Truelens provides structured, tiered support to meet different buyer needs.; ; Standard Support is included in the service price. It provides access to remote support during UK business hours (09:00–17:00, Monday to Friday, excluding public holidays). Support is delivered via email and an online ticketing system. Standard Support covers incident resolution, service availability issues, and guidance on standard platform usage.; ; Enhanced Support is available at an additional cost. It provides extended support hours, priority response times, and scheduled support calls. Enhanced Support includes access to a named cloud support engineer who understands the buyer’s configuration and use of the service.; ; Premium Support is available by agreement and includes a named Technical Account Manager (TAM). The TAM provides proactive service reviews, change planning support, and escalation management. Premium Support is suitable for buyers with complex or high-volume usage.; ; Support pricing is based on the selected support tier and contract size and is agreed in advance. There are no hidden charges.; ; All support is provided remotely. Onsite support can be arranged as an additional, separately priced service if required.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Truelens provides structured onboarding to ensure users can quickly and confidently start using the service. This includes an initial onboarding session delivered remotely, covering platform navigation, document upload, workflow configuration and reporting. Buyers receive access to online user documentation, including step-by-step guides and FAQs.; ; Role-based training sessions are provided for administrators, ensuring they understand their responsibilities and how to use the system effectively. Training is delivered via live online sessions and recorded materials for later reference.; ; Support is provided during initial setup to help configure compliance libraries, user roles and workflows aligned to the buyer’s processes. Ongoing support is available via email and ticketing system. No onsite training is required, but can be arranged at additional cost if requested.; ; This approach ensures rapid adoption while minimising disruption to existing operations.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Users retain full ownership of their data at all times. At the end of the contract, users can extract their data using built-in export tools or via API. Data can be exported in commonly used, non-proprietary formats, including structured data files and document packages.; ; Upon contract termination, users are provided with a defined data access period to complete data extraction. During this period, support is available to assist with data export if required. After confirmation that data has been successfully extracted, Truelens will securely delete all customer data in accordance with its data retention and deletion policies.; ; Data deletion is performed using industry-standard secure deletion processes. Confirmation of deletion can be provided on request. No additional fees apply for standard data extraction at contract end.
• End-of-contract process: At the end of the contract, user access to Truelens is disabled following completion of data export. The standard contract price includes access to the service, support, maintenance, updates and standard data export functionality.; ; Included in the price:; - Access to all contracted features; - Standard support during the contract; - Data export using standard tools; - Secure deletion of data after termination; ; Additional costs may apply if buyers request:; - Extended data retention beyond contract end; - Bespoke data export formats; - Onsite support or training; - Additional consultancy services; ; All additional costs are agreed in advance. There are no automatic renewals unless explicitly agreed.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Truelens is accessed through a responsive web interface. Desktop users have access to the full feature set, including document upload, detailed review outputs, dashboards and configuration tools. Mobile access supports core activities such as viewing documents, review results, dashboards and notifications. Configuration activities and bulk document management are optimised for desktop use due to screen size and usability considerations. No separate mobile application is required.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Truelens provides a browser-based user interface designed for clarity and ease of use. The interface uses structured layouts, clear navigation and role-based views to support different user needs. Users can upload documents, view assessment results, track issues and access reports through dashboards. The interface is designed to support consistent workflows and minimise training requirements, using plain language and clear visual indicators.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Truelens has been designed with accessibility considerations aligned to WCAG 2.2 AA. Accessibility has been assessed through a combination of automated testing tools, manual testing and user feedback. Automated tools are used to identify issues such as colour contrast, missing labels and keyboard navigation problems.; ; Manual testing includes keyboard-only navigation checks and screen reader compatibility testing using commonly available assistive technologies. Feedback from users with accessibility needs is incorporated into iterative improvements of the interface. Accessibility considerations are included in design reviews and change assessments to ensure ongoing compliance as the service evolves.; ; Formal third-party accessibility audits can be arranged on request. Accessibility improvements are prioritised where issues are identified.
• API: Yes
• What users can and can't do using the API: Truelens provides secure APIs to support integration with existing systems. Users can use the API to automate document upload, retrieve assessment results, access metadata, and integrate reporting outputs into other platforms.; ; Through the API, users can:; - Upload documents for assessment; - Retrieve assessment status and results; - Access structured data, audit logs and reports; - Integrate Truelens with document management or workflow systems; ; Users cannot use the API to:; - Modify core system logic or AI models; - Bypass access controls or security measures; - Change service-level configuration without appropriate permissions; ; API access is role-based and secured using authentication tokens. Setup requires administrative permissions. Some configuration and administrative functions remain available only through the user interface to maintain system integrity and security.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Truelens supports configuration-based customisation to align the service with buyer needs while maintaining a standardised platform.; ; Users can customise:; - Compliance libraries and assessment criteria; - Review workflows and approval stages; - User roles and access permissions; - Reporting views and dashboards; - Notification settings; ; Customisation is performed through the user interface by users with administrative permissions. Configuration options are designed to be flexible without requiring bespoke development.; ; Standard users can customise personal settings such as dashboard views and notifications, within the permissions granted to them. Organisation-level configuration is restricted to authorised administrators to ensure governance and consistency.; ; Truelens does not support bespoke code customisation. Additional configuration support or consultancy can be provided as an optional, separately priced service if required.

Scaling

• Independence of resources: Truelens uses a multi-tenant cloud architecture with logical data separation and resource isolation. Platform resources automatically scale based on demand, ensuring consistent performance for all users. Usage is monitored continuously, and capacity is managed proactively to prevent contention. No customer can access another customer’s data or impact their performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Usage metrics include details and actions relating to Projects, Documents and Events.; User actions such as logins and activity is also available. ; Metrics are visible and linked to user access rights.
• Reporting types: Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Users can export their data directly through the Truelens user interface or via secure APIs. Exports are provided in common, open formats to support reuse and migration. Document files, metadata, audit logs and reports can be downloaded securely. Export processes are designed to be straightforward and do not require specialist tools or software.
• Data export formats: Other
• Other data export formats: PDF/A-1
• Data import formats: Other
• Other data import formats: PDF/A-1

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Truelens targets 99.9% monthly availability, excluding planned maintenance. Availability is measured at the application level. Planned maintenance is communicated in advance and scheduled outside core UK business hours where possible.; ; If availability falls below the guaranteed level, service credits are applied in line with the agreed SLA. Credits are calculated as a percentage of the monthly service fee and applied to future invoices. Persistent or severe availability issues may give buyers the right to terminate the contract in accordance with contract terms.; ; Availability performance is monitored continuously, and reports can be provided on request.
• Approach to resilience: Service operates on redundant DigitalOcean infrastructure within UK datacentres. Database backups performed hourly with point-in-time recovery capability. Load-balanced application servers ensure service continuity. Detailed resilience architecture available on request for security-cleared buyers. ; ; Truelens is hosted on resilient public cloud infrastructure with multiple availability zones. The service is designed with redundancy at application, data and infrastructure layers. Data is backed up regularly and stored securely to support recovery.; ; The platform supports automated failover and recovery processes to minimise service disruption. Infrastructure is monitored continuously, and capacity is managed proactively. Detailed information on datacentre locations and resilience controls is available on request in line with government cloud security principles.
• Outage reporting: Truelens reports outages through multiple channels. Users receive email notifications for service incidents and planned maintenance. A public service status page provides real-time updates on service health. Email alerts for all users during incidents. API endpoint for programmatic status monitoring. Support channels are available for users to report issues, and incident updates are shared regularly until resolution. Post-incident reports provided within 48 hours of major outages.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Management access is restricted through role-based access control (RBAC) with MFA enforcement. Administrative interfaces require SSH key authentication for infrastructure access. Support personnel access is logged and monitored. Production environment access is limited to authorized personnel only, with allocations audit-logged. Customer data access by support staff requires explicit user authorization and is time-limited.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Truelens follows documented information security policies aligned to recognised standards, including ISO 27001 principles. Policies cover access control, data protection, incident management and risk management. Responsibility for information security sits with senior management, supported by defined operational roles.; ; Policies are reviewed regularly, and staff receive security awareness training. Compliance is monitored through internal reviews and operational controls. Security incidents are reported, managed and reviewed to ensure continuous improvement.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All service components are tracked throughout their lifecycle using configuration management records. Changes are assessed for functional and security impact before implementation. Security implications are reviewed as part of the change approval process. Changes are tested in non-production environments before release. Emergency changes follow defined procedures and are reviewed retrospectively.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Truelens assesses threats using vulnerability scanning, supplier advisories and industry intelligence. Patches are prioritised based on severity and deployed promptly. High-risk vulnerabilities are addressed as a priority. Threat intelligence is sourced from cloud providers, security advisories and trusted industry sources.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Protective monitoring identifies potential compromises through log analysis, alerts and anomaly detection. Suspected incidents trigger investigation and response procedures. Critical incidents are responded to immediately, with escalation as required. Monitoring supports rapid detection and containment.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Truelens uses predefined incident management processes. Users can report incidents via support channels. Incidents are logged, prioritised and resolved according to severity. Incident reports and updates are provided to affected users. Root cause analysis is performed for significant incidents.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Signup for free account. Free 200 pages of document processing given. View reports linked to the pages processed
• Link to free trial: https://bsr.truelens.tech/

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at felipe.manzatucci@optimabi.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.