EPIQ SYSTEMS, LTD.

Epiq Narrate

Accelerate case building, trial preparation, and presentation. Facilitate case preparation with a platform for creating, managing, and sharing case narratives and electronic bundles for legal proceedings. Organise documents and evidence in a cloud-based tool to streamline preparation and presentation of exhibits, designations, and objections at witness statements and trial.

Features

• Organise case facts into linked stories connecting people places evidence.
• Copy linked evidence into working folders binders exhibits and designations.
• Save time and reduce rework by saving  frequently used queries.
• Apply secure burnt in redactions to permanently remove sensitive content.
• Upload and share case materials securely using cloud-based folder permissions.
• Highlight, tag, annotate evidence collaboratively within a shared case workspace.
• Review video transcripts and create designations objections or clipped extracts.
• Automatically hyperlink documents, testimony, exhibits to streamline organisation and referencing.
• Locate information quickly using advanced Boolean search across case materials.

Benefits

• Navigate cases quickly through unified story structures replacing traditional folders.
• Streamline preparation by producing ready filings and organised evidence collections.
• Reduce rework by retrieving updated materials matching recurring search patterns.
• Protect confidentiality ensuring removed information cannot be recovered or searched.
• Collaborate confidently by controlling document access for clients, witnesses, teams.
• Enhance preparation through real-time team insights added directly onto materials.
• Accelerate preparation quickly identifying key testimony within integrated transcript tools.
• Save time by connecting materials for faster review and preparation.
• Find relevant content rapidly searching full text across evidence collections.
• Maintain hearing flow through coordinated real-time document presentation and distribution.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contracts@epiqglobal.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

326267217691165

Contact

Sandeep Patel
020 7367 9173
contracts@epiqglobal.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Document
  • EDiscovery and forensics

  Content services

  • Enterprise Content Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Relativity and Epiq Discovery integration
• Cloud deployment model: Public cloud
• Service constraints: All software upgrades are provided outside of normal working hours and we provide adequate notice to potential affected users.
• System requirements:
  • Access to the internet
  • Speed of machine

User support

• Email or online ticketing support: Yes
• Support response times: We aim to respond to all emails received within standard working hours (9am to 5.30pm, Monday to Friday) within one hour. We provide an emergency email address for queries received outside standard working hours. We aim to respond to these emails within two hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Each client is supported by an account manager, as well as a project team who act as a first point of contact. The project support team will engage technical support and other resources as required, as they are best placed to analyse issues raised by clients, as well as having the capability to troubleshoot and resolve many day-to-day issues. The project support team is also assisted by a technical support desk, who are able to address general functionality questions. Technical support is included within the application licensing and is not separately charged. If on-site attendance is required, professional services and travel costs may be charged.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Initial client engagement is focused on a kick off meeting, which may take place in person or via a conference call/web presentation. This will define the scope of services to be provided, key client deadlines, data sources to be processed and loaded to the platform and information that will assist our project management team to design the database to the specific requirements of the matter. The initial meeting is followed by a training session, usually delivered online, where a small set of data is loaded to the platform and key stakeholders are introduced to the functionality of the platform, as well as the specific configuration that has been deployed for the team. After taking feedback from the key stakeholders, any further changes that need to be made are implemented by the project management team and training provided to the full user community, either online or in person. Our training programmes are also supported by user guides available in PDF format, video and other online resources.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Clients have a variety of choices over how their data is extracted when the contract ends. The solution can be tailored to meet client and project requirements. A 'cold hosting' option can be utilised where we will continue to host the data (at a reduced rate). Users also have the ability to export their data into a set of native files, PDFs and with a word index. Users also have the option of extracting their data offline for use in their own offline version of the platform.
• End-of-contract process: The end-of-contract process will be discussed at the project kick off meeting and again towards the end of the project. The process will be managed by the Project Manager and a solution can be created to meet specific project and client requirements. A 'cold hosting' option can be utilised where we will continue to host the data at a reduced rate. Users also have the ability to export their data into a set of native files, PDFs and with a word index. Users also have the option of extracting their data offline for use in their own offline version of the platform. The price of the contract will depend on client requirements and how long the data will need to remain active.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is accessible

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are no design differences between the mobile and desktop service.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: We enlisted the skills of a user Interface consultancy to ensure that TMX is easy to use and familiar to users of platforms, such as Microsoft Outlook. TMX has a simple and uncluttered interface that makes it very intuitive to use. TMX provides prompts with reminders and usage tips while in the product.
• Accessibility standards: None or don’t know
• Description of accessibility: Users can change colours based on their requirements ; Designed with user access permissions in mind in order to make features accessible. ; As a cloud service, EpiqTMX is available remotely. ; Translation into other languages available through the browser.
• Accessibility testing: We have not done any interface testing with users of assistive technology.
• API: Yes
• What users can and can't do using the API: Anything that the web client can do can be done via API.
• API documentation: No
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: EpiqTMX can be customised to the client logo (whitelabeling to background colours).

Scaling

• Independence of resources: This is a web based service and the capacity in our data centres is more than capable of meeting all client requirements.

Analytics

• Service usage metrics: Yes
• Metrics types: We can provide a range of service usage metrics such as user activity and matter activity.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Clients are able to export their data directly from EpiqTMX at any time provided they have the correct permissions. Users can export PDFs and/or native files with a system generated index. Projects can also be taken offline to a standalone version of the platform.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Adobe Acrobat (.PDF)
  • All client native files
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • .DAT
  • .OPT
  • Drag & Drop in Native Format
  • PDF
  • Transcript files
  • Audio and video files
  • All Microsoft formats (Word, Excel etc)
  • .PTX email files

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: We train staff to answer phones within three rings, acknowledge emails within one hour and escalate all unusual queries to their manager. We maintain a formal policy for handling queries and all personnel are trained in our escalation process. Specific service level agreements for availability are agreed with clients on a case-by-case basis.
• Approach to resilience: Epiq has full High Availability built into webservers. We also use premium Solid State Drive disks which are replicated for resilience. We use Availability Sets for all the Virtual Machine pairs for resilience, and Microsoft Azure also has hardware and network resilience built into their platform. Depending on the deployment service level agreement, TMX Virtual Machine pairs can be deployed between Availability Zones instead of just Availability Sets. An availability zone will split the processing power between multiple datacentres within the Azure region (in the UK, Epiq currently has three), which are physically separated from each other by a substantial distance. Therefore, if a datacentre fails, TMX will still run as expected. Daily backups of all data and components are retained for 30 days in our UK datacentres and daily incremental backups are also retained for 30 days. Epiq has partnered with Microsoft Azure for its UK cloud environment, which is managed by Epiq. Epiq can rehydrate all infrastructure and application from scratch in less than 3 hours
• Outage reporting: Email alerts are sent directly to the IT support team, who will then investigate and report back to clients confirming the start and end times for any outage, our analysis of the cause of the outage and how the issue was/will be resolved. Reports will also include recommendations for any future changes or upgrades if these are required.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
  • Other
• Other user authentication: Epiq Access provides a unified digital interface and single-sign-on (SSO) experience to Epiq projects, applications, tools, reports, and information. By optionally integrating with clients’ own identify provider (such as OKTA), Epiq Access gives clients even greater control and a centralised method to automatically and independently update or disable a user’s access to Epiq systems and information, improving overall system security. Multi-Factor Authentication (MFA) is also supported, including five options for users to conveniently receive the second factor for authentication.
• Access restrictions in management interfaces and support channels: EpiqTMX features a robust set of roles and user permissions that can be adapted depending on user profiles. Clients can host multiple matters that can contain customised permissions. Matter administration staff can assign users to matters and can choose from a standard set of roles (e.g. Team Admin, Power User, Standard User, Guest) or can set up custom permissions based on over 20 attributes. Matter data is encrypted and can only be accessed by users who have been added to the matter.
• Access restriction testing frequency: At least once a year
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Information security is managed through a dedicated information security team who are responsible for designing and updating polices relating to user access, physical controls, network storage, appropriate use of systems and compliance with existing legislation. Policies are reviewed and updated on a quarterly basis. Mandatory training on security issues is provided to all employees when they join the company and at least annually during their tenure. Our data centre and operations centre have been accredited to ISO 27001 standard and as part of this certification we are regularly interviewed and audited by an external auditor - a process that evaluates our policies and practices to identify and resolve potential vulnerabilities.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: A formal Change Management programme monitors all development and maintenance activities for key systems, ensuring established policies and processes are followed. This includes a Change Control team which monitors and approves all changes. Documented policies and procedures are in place for software development and infrastructure changes which validates that a standardised and consistent process is followed. Software development change policies include Scrum/SDLC procedures, validation procedures and release procedures. All changes are impact-assessed including any possible information security related impacts. We use a centralised ticketing process for tracking requests and approvals for each change. Systems are restricted to authorised users only.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Continual evaluations of system and network security are conducted by a trusted external third party through regularly scheduled vulnerability scans and penetration tests. Epiq’s Security Team subscribes to multiple services for vulnerability alerts on deployed software and hardware. Daily reviews are executed by the Information Security team for emerging threats. Internal assessments are deemed confidential and proprietary. Patches are reviewed and assigned a severity level based on existing compensating controls. Epiq’s change management process governs the deployment of security patches. All patches are tested prior to deployment. The timeframe for security patches is governed by severity level.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Epiq has a comprehensive Incident Response Plan (IRP) setting out how we respond to information security incidents. These include (but are not limited to) system intrusions/misuse, or any situation where confidentiality of sensitive data, data integrity or business critical systems may have been compromised. The primary goal of the IRP is to restore normal service operations as quickly as possible, whilst minimising the adverse impact on business operations, protecting Epiq and client data. An incident is identified either by Epiq’s IT staff or in-place utilities and we have a response team in place to quickly respond and rectify any situation.
• Incident management type: Supplier-defined controls
• Incident management approach: We maintain an Incident Response Plan, which sets out our approach to reporting and responding to security incidents. Employees report incidents to the information security team using a standard format document and the team is responsible for investigating the reported activity in a timely manner and reporting findings to the client, management and any appropriate external authorities as necessary. Incident reports are usually provided by secure email. Our information security team subscribes to various industry alert services to keep abreast of relevant threats, vulnerabilities or alerts from actual incidents
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 8%
• Between £1,000,001 and £2,500,000: 12%
• Between £2,500,001 and £5,000,000: 15%
• Over £5,000,001: 20%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Saturday 11 January 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: BSI
• ISO 9001 accreditation date: Thursday 10 April 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 3fca2ef3-96cc-4af9-b9ed-3afdf90083ea
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contracts@epiqglobal.com. Tell them what format you need. It will help if you say what assistive technology you use.