ANEXSYS LIMITED

Aurora (Data Management)

Aurora, our Digital Enterprise Platform, transforms fragmented legal data into strategic assets. It unifies your portfolio, offering complete visibility and cost control, while preserving the freedom to choose optimal review platforms. Leveraging CoreECI and integrated AI, Aurora eliminates complexity and provides enterprise-grade security for better legal outcomes.

Features

• Reusable, searchable repository transforming scattered information into strategic assets.
• Advanced searching and filtering for rapid, data-driven early decisions.
• Single interface for complete portfolio visibility and management.
• Integrated AI capabilities deploy the right tools across your portfolio.
• Secure private infrastructure maintains data sovereignty and enterprise-grade protection controls.
• Centralisation across platforms eliminates the coordination burden while standardising workflows.
• Matter-specific review platforms let you break free from vendor lock-in
• Smart AI searching capabilities for finding patterns within data.
• AI Summarise provides automated document summarisation, enhancing overall document understanding.
• Connects seamlessly with diverse enterprise data sources.

Benefits

• Gain strategic, cost-controlled clarity across your legal data portfolio ecosystem.
• Eliminate platform lock-in, gaining unprecedented freedom and unified data control.
• Systematically reduce hidden expenses and achieve cost visibility across matters.
• Accelerate insights and make faster, more informed decisions.
• Reduce complexity and eliminate coordination overhead with standardised, integrated workflows.
• Transform fragmented information into a strategic asset through knowledge reuse.
• Access powerful cross-project insights via one intuitive interface, optimising resources.
• AI reviews minimise risk of error, giving peace of mind.
• AI adoption is flexible, secure, and tailored to legal needs.
• Unifies your legal data portfolio while preserving platform choice.

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@anexsys.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

451398391222023

Contact

Rob Crowley
07527 384 123
tenders@anexsys.com

About the service

• Service categories:
  • Application Development and Deployment
    • Data management
      • Database management systems
        • Document-Oriented Database Systems
      • Data integration and intelligence
        • Data Ingestion and Transformation Software
        • Dynamic Data Movement Software
        • Data Quality Software
        • Data Access Infrastructure Software
        • Composite Data Framework Software
        • Master Data Intelligence Software
        • Metadata Management Software
        • Data Archiving and Information LifD-Cycle Management
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: We announce a monthly planned downtime window for significant changes at least four weeks in advance. The maintenance itself is overnight on Saturday, from 10 pm GMT. This cadence ensures we deliver regular innovations and improvements, so you always have access to the latest stable release. "What's new" emails keep all users up to date with the latest features, as soon as they become available.
• System requirements:
  • Recommended 4GB of RAM (minimum 2GB) for optimum performance
  • Minimum resolution is 1280 x 720 pixels
  • Any currently supported Windows OS running Google Chrome (preferred)
  • Any currently supported Windows OS running Microsoft Edge
  • While not supported, many users use Safari and Firefox successfully
  • Any currently supported Mac OS X supporting Chrome
  • While not supported, many users use Chrome for tablet successfully
  • Browser must accept cookies for dual-factor authentication

User support

• Email or online ticketing support: Yes
• Support response times: Our core support hours are Monday to Friday, 08:30 to 18:30. Users can log support requests using our ticketing facility 24/7. Outside of office hours, we typically provide an initial response to support requests within three hours in the evening, with overnight requests actioned the following day. We also offer enhanced support hours covering weekends and bank holidays by prior arrangement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Anexsys delivers supplier support through a structured system featuring dedicated client teams, clear escalation routes, and measurable Service Level Agreements (SLAs) for response and resolution. Our team will support you from scoping and data collection to the processing, review and production. Our complete onboarding process ensures we understand your needs from the outset. You will have direct access to our security-cleared technical project managers. They all have extensive experience, and a large technical team supports them. Our support team can assist with more complex tasks such as creating layouts, search term reports, applying analytics functionality, and creating productions. We will seek your approval for any additional costs for completing complex tasks. Our Head of Public Sector serves as the primary point of contact and account manager. This role is responsible for client success, managing contract governance, tracking budgets and ensuring clients maximise the services offered. Contract governance and ongoing relationship management are led through the processes of our Strategic Client Solutions (SCS) team. The SCS team provides proactive service management, including biannual reviews, monthly reporting (such as storage usage reports and budget tracking) and making technology recommendations.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our onboarding process starts with a kick-off meeting where we agree on the ordering and engagement process, key contacts, timelines, design templates and workflows, define security arrangements and agree on milestones. We also analyse existing skills within your team and determine what levels of training will be required. We then arrange online or face-to-face training using dummy data. We support all our training with comprehensive user guide documentation. We also support each new case with its own engagement process. With any new case, a scoping call will be required to determine data sources, sizes, whereabouts, and requirements specific to the case, such as de-duplication and search criteria. We will use previously agreed, bespoke templates to set up your new workspace, applying case-specific adjustments as required. We will also provide further training on the specific workspace at this stage so that reviewers are introduced to their case-specific data and workflows.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: MP4
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We discuss the accessibility requirements of your user base with you and agree on bespoke solutions for every contract. Following these discussions, our existing documentation can be adapted or new documentation created, keeping the audience's accessibility needs in mind. The platform natively supports browser-level accessibility features such as high contrast displays and large fonts. This can be supported through user-level configurations, such as implementing dark mode for light sensitivity or changing highlight colour sets for colour-blind users. While the core vendor documentation is in English, we routinely enhance and customise client-specific documentation, including instructions, presentations and videos, translating these to meet the needs of non-native English speakers. For video content, our integration with AWS Transcribe offers automatic subtitling capabilities for audio and video files. Written documentation can be offered in large fonts and/or high-contrast formats to support those with visual impairments. We use multiple media types in our knowledge transfer programmes, so providing users with the ability to choose the medium that is most accessible for them.
• End-of-contract data extraction: We offer various closure options. We can export the documents with the agreed metadata on an encrypted hard drive or transmit these via sFTP. Data can then be restored if required. Or we can delete all data. We also have options for the source data initially supplied for processing. Such source data can be stored for an agreed period, copied and returned, or deleted from our systems. We will only delete the data from our servers once you have confirmed that you can access your archive. We use forensically sound deletion processes, rendering data irretrievable from our systems.
• End-of-contract process: Our case closure letter, issued in advance, outlines all available options and associated costs clearly. Options such as archiving, exports or extended data storage are priced on a sliding scale based on case size, providing visibility of what is included and what may incur additional charges. Deleting all project data from our systems is free of charge, and once completed, we provide a formal certificate of destruction for your records.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• Description of service interface: Aurora's portal delivers a real-time dashboard and analytics interface that provides unprecedented visibility across your entire matter portfolio. Aurora centralises all matter data into standardised metrics, giving you complete transparency, oversight, and control through a single interface. Aurora includes an extensive system reporting library featuring intake and audit reports, processing summaries with exception handling, review workspace analytics, production metrics, and user activity tracking. Users can export reports to CSV or PDF for seamless integration with your existing workflows. Aurora provides matter-level metrics and reporting with sophisticated matter organisation capabilities, including departmental categorisation and portfolio-wide insights that drive better decision-making.
• Accessibility standards: None or don’t know
• Description of accessibility: We have achieved conformance with the WCAG 2.1 Level AA standard. This certification demonstrates our commitment to supporting users with a wide range of people with disabilities. We have enhanced the application to include focusable elements of the UI to ensure a better overall user experience. Features include focus indicators, adaptable fonts and colours, high contrast text and icons, and the ability to navigate using keyboard or mouse, to support diverse user needs.
• Accessibility testing: None.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Aurora features a robust API interface, which we use to build connectors with other eDisclosure platforms. Buyers benefit from the seamless integration that our many API integrations bring without needing to interact with the API themselves.
• API documentation: No
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: We offer users significant flexibility to tailor the platform to their specific requirements. Users enjoy the freedom to select the optimal review platform for each unique matter, such as Relativity or Reveal, ensuring they always have the right tool for the job while maintaining a unified data management system. This approach democratises access to sophisticated data processing, enabling teams to leverage their preferred legal productivity tools. Furthermore, our AI features are highly adaptable. Users can fine-tune AI models through iterative prompting to address specific legal needs, enabling teams to integrate AI on their own terms. Users retain control over how and where AI accesses their data, ensuring security while deploying the right tools for tasks like pattern discovery or document summarisation. Even within standardised workflows, we maintain the flexibility required to handle unique matter requirements, empowering legal teams to orchestrate their portfolios with intuitive dashboards and customised insights.

Scaling

• Independence of resources: Hosting in our private cloud infrastructure ensures the application is secure, reliable, and fully controlled by our team. This proprietary environment allows us to maintain and update the software quickly and efficiently, respond to client needs with agility, and safeguard sensitive data with enterprise-grade security. Our platform is purpose-built and managed entirely by us, showcasing our commitment to innovation and delivering tailored, high-performance solutions that meet the evolving demands of legal teams. There is no known limit on simultaneous users in an instance. Our platform will scale horizontally and vertically as needed to support user demand.

Analytics

• Service usage metrics: Yes
• Metrics types: The platform provides flexible reporting tailored to your needs, covering everything from high-level project statistics (e.g., data volumes processed and documents in review) to granular metrics (e.g., pages reviewed per hour or decision overturn rates). Reports can be delivered graphically and numerically via dashboards, with bespoke scripts for alerts and user-friendly insights. In addition, our Strategic Client Solutions (SCS) team specialises in creating custom reports and delivering any additional metrics beyond standard offerings, ensuring complete visibility of service usage.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data export is managed securely and in line with case and user requirements. User permissions strictly govern the ability to download documents, reports, or print content, and case manager approval is required before enabling these features. For large-scale exports, our team can handle these process or end-users can be guided through how to complete these in-house. Exported data can be delivered via Secure FTP for electronic transfer or provided on encrypted physical media, which can be collected or couriered as needed.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Concordance DAT file (standard legal export)
  • PDF (Single Page and Multi-Page)
  • Natives
  • Text files
  • Images (JPG, TIFF, PNG, etc)
  • Media formats including MP3, MP4 and WAV
  • Loadfile Formats (LST)
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Concordance DAT file (native, text and metadata files)
  • CSV, HTML or TXT loadfiles (native, text and metadata files)
  • Standard files such as Word, Excel and PDF
  • Raw unstructured data such as PST and ZIP files
  • OPT files (images)
  • Media formats including MP3, MP4 and WAV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: As we have control over hosting, we can offer a range of uptime SLAs to meet your needs. These start at 99.5% of the total number of minutes in each calendar month outside of planned maintenance windows and increase to meet the most demanding requirements. Or we can allow you to take complete control by managing a platform you host within your infrastructure. Our support hours are 08:30 to 18:30, Monday to Friday. Following our initial acknowledgement, you can expect a comprehensive response to low-urgency queries in four business hours, medium-urgency queries in two business hours, and high-urgency queries within one hour, 24/7.
• Approach to resilience: Anexsys is an ISO 27001, ISO 9001 and Cyber Essentials Plus accredited organisation. Our data centres are ISO 27001 and SOC 2 compliant. The processes and security arrangements we have in place (protecting both physical and digital assets) are regularly audited for compliance, internally and externally. We have documented disaster recovery and business continuity procedures. You can view these by request. We provide a completely bespoke approach to resilience, defining the hosting environment and backup regime to meet your unique needs. We have designed our environments for high resilience, implementing multiple layers of redundancy and robust disaster recovery protocols to enable continuous operation outside agreed maintenance windows. Our architectural design utilises redundant systems across primary and secondary UK data centres. Our infrastructure is fully hot-swappable, and all processing systems are on immediate failover for high availability. Resilience is further enhanced by continuous replication and maintaining daily incremental and weekly full backups, with all production data and backups being encrypted. Our infrastructure is highly scalable, ensuring consistent performance even when supporting hundreds of concurrent users.
• Outage reporting: The platform is actively monitored, and in the event of an outage or significant downtime, our in-house infrastructure team will be notified, and project managers will, in turn, issue email alerts to you. Email alerts will contain detailed information regarding our plans to address the issue(s), the root cause, and the expected length of the outage.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
  • Other
• Other user authentication: We offer SSO capabilities for any provider that uses the OpenID, SAML 2.0 or Auth0 protocols. We can integrate SSO with LDAP-compliant tools such as Active Directory and Ping to provide a single sign-on for user authentication. We achieve this through Consilio ID, a backend application that works directly with the client’s SSO provider and establishes seamless communication between the SSO application and our platform for the user. We have tested SSO using the SAML 2.0 and OpenID protocols with SSO providers Ping, Okta, and Azure.
• Access restrictions in management interfaces and support channels: Access in management interfaces and support channels is controlled by adhering to the Principle of Least Privilege and using Role-Based Access Controls (RBAC). Access is denied by default and granted only when explicitly authorised based on a user’s job function. Permissions are highly granular and flexible, allowing user access to be configured to match the user’s job role. Permissions control which databases and data can be accessed, the ability to import/export data and access to the administrator interface. All actions are immutably logged and fully auditable for accountability. All access granted for troubleshooting is strictly Just-In-Time (JIT) and fully logged.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
  • Other
• Description of management access authentication: We offer SSO capabilities for any provider that uses the OpenID, SAML 2.0 or Auth0 protocols. We can integrate SSO with LDAP-compliant tools such as Active Directory and Ping to provide a single sign-on for user authentication. We achieve this through Consilio ID, a backend application that works directly with the client’s SSO provider and establishes seamless communication between the SSO application and our platform for the user. We have tested SSO using the SAML 2.0 and OpenID protocols with SSO providers Ping, Okta, and Azure.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Anexsys’ policies for handling client data are laid down by our parent, Consilio, and ensure that data and devices are stored securely and protected from unauthorised access while in our possession. We treat all client data as confidential. Our enterprise privacy structures and policies ensure that we meet international, EU and UK privacy regulations. These include the Data Protection Act 2018, the General Data Protection Regulations, the Computer Misuse Act 1990, Part 2 of the Serious Crime Act 2015, the Communications Act 2003, the Regulatory and Investigatory Powers Act 2000, GDPR, HIPAA, ITAR, CCPA, and others. They also include HMG security requirements such as security considerations for protecting OFFICIAL information on a corporate network, the Cloud Security Principles, End User Device security guidance and Browser Security guidance. Compliance with ISO standards ensures that we are committed to meeting your needs and protecting our information and data. Completing regular internal and external audits of our quality and information security management systems is a mechanism to show that we are continually improving and learning.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We have a formal change management process covered under our ISMS policy framework. All ISMS policies, including the change management policy, are reviewed and approved annually by our Information Security Governance Council. The change management process includes internal and external notification protocols based on the change's impact. The relevant personnel approve all changes, test them in a dedicated environment, and implement them into the production/live environment. We have a Change Control Board composed of representatives from various teams, including information technology, application development, information security, and support.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our ISO 27001 Information Security Management System documentation documents the management of our technical vulnerabilities. In summary, measures include maintaining an inventory of assets, ensuring a patching regime is adhered to for all devices, and conducting a monthly vulnerability scan by a third party. We also restrict software installation on all company devices and audit devices regularly. OS patches are applied monthly, and application patches are applied as soon as reasonably possible after they are released by the platform vendor.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our platform's configuration and cloud-based infrastructure allow for controlled, audited and monitored access. We have a 24/7 InfoSec team that monitors all our systems. All processes are monitored and restarted automatically, with all storage being highly available, and appropriate distributed consensus is applied to minimise data loss. Only highly available load balancers are accessible from the internet with specific access controls limiting traffic into the private networks where all activity occurs. Our ISO 27001 Information Security Management System documents all monitoring and support processes.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: We use well-defined incident response procedures, triggered by security alerts and 24/7 monitoring by a security operations vendor. This includes escalation protocols to management and client notification protocols, especially if client data is compromised. Users report incidents via a dedicated email address for non-urgent issues, or directly via telephone during working hours. For complex issues, Anexsys diagnoses the problem and seeks a permanent solution while developing workarounds. The process for providing an incident report is client-specific and timelines depend on the nature of the incident. We secure data first, then provide transparency on the issue and detailed proposals for remediation.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Schellman Compliance LLC
• ISO/IEC 27001 accreditation date: Monday 6 January 2025
• What the ISO/IEC 27001 doesn’t cover: All our services are covered by our ISO/IEC 27001 certification.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: British Assessment Bureau Ltd
• ISO 9001 accreditation date: Wednesday 13 August 2025
• What the ISO 9001 doesn’t cover: All our services are covered by our ISO 9001 certification.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 9986e0a6-b241-4960-8f41-12bf072baecc
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 49743f06-ea2e-449d-a61a-50c1c2a1e8b4
• Other security certifications: Yes
• Any other security certifications:
  • HITRUST certified (CSF V9.3)
  • FedRAMP
  • SSAE-16 SOC 1 and SOC 2
  • ISO 9001 and ISO 14001

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@anexsys.com. Tell them what format you need. It will help if you say what assistive technology you use.