ANEXSYS LIMITED

Reveal (Production and Operations)

Through Reveal, the leader in legal and compliance AI, we offer the ultimate AI-powered platform for eDiscovery and investigations. This seamless end-to-end technology enables organisations worldwide to accelerate complex legal workflows, uncover vital information faster, and substantially reduce eDiscovery costs.

Features

• Direct integrations with Google Vault, Slack and Microsoft 365 sources.
• Automates data processing, culling up to 60% before review.
• Generates document production based on any third-party specification seamlessly.
• Uses generative AI search tool, Ask, for brilliant, precise results.
• Automatically redacts PII and privilege across your project in bulk.
• Visual analytics including Cluster Wheel, Heatmap, and Communications Analysis.
• Pre-built or custom AI to prioritise document review and coding.
• Transcribes audio/video files into searchable text automatically using AI.
• Secure private cloud hosting, compliant with ISO27001, CE+ and SOC2.
• One-click preservation workflows for automated and defensible legal hold notices.

Benefits

• Substantially reduce overall eDiscovery costs and control unpredictable external billing.
• Accelerate complex workflows and uncover vital information faster using AI.
• Gain immediate insights to assess risks and develop legal strategies.
• Respond to records requests ten times faster than manual review.
• Empower your teams to conduct discovery without vendor support.
• Ensure compliance with CCPA and GDPR, avoiding financial penalties.
• Optimal, AI-driven eDiscovery for disputes and investigations of any size.
• Achieve superior insights, making smarter and more informed decisions rapidly.
• Mitigate compliance risk by monitoring employee communications for policy violations.
• Turn legal expertise into reusable AI models, accelerating future matters.

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@anexsys.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

655161421091599

Contact

Rob Crowley
07527 384 123
tenders@anexsys.com

About the service

• Service categories:
  • Applications
    • Production and operations
      • Service industry and public sector operations
        • Healthcare
        • Education
        • Public Order and Safety
        • Police
        • Defence
        • Social Security Administration
        • Adult Social Care
        • Children's Social Care
        • Other
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: A key advantage of our service is the flexibility to schedule client-specific maintenance windows well in advance and to postpone them around busy times or deadlines. Planned downtime for significant changes is agreed at least 4 weeks in advance, with scheduled extended downtime windows lasting less than 2 hours each. Annual maintenance and update windows are determined and communicated well in advance.
• System requirements:
  • Recommended 4GB of RAM (minimum 2GB) for optimum performance.
  • Minimum resolution is 1280 x 720 pixels
  • Any currently supported Windows OS running Google Chrome
  • Any currently supported Windows OS running Edge v79+ (Chromium-based)
  • Any currently supported Windows OS running Firefox
  • Any currently supported Mac OS X supporting Safari
  • Any currently supported Mac OS X supporting Chrome
  • Any currently supported Mac OS X supporting Firefox

User support

• Email or online ticketing support: Yes
• Support response times: Our core support hours are Monday to Friday, 08:30 to 18:30. Users can log support requests using our ticketing facility 24/7. Outside of office hours, we typically provide an initial response to support requests within three hours in the evening, with overnight requests actioned the following day. We also offer enhanced support hours covering weekends and bank holidays by prior arrangement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Anexsys delivers supplier support through a structured system featuring dedicated client teams, clear escalation routes, and measurable Service Level Agreements (SLAs) for response and resolution. Our team will support you from scoping and data collection to the processing, review and production. Our complete onboarding process ensures we understand your needs from the outset. You will have direct access to our security-cleared technical project managers. They all have extensive experience, and a large technical team supports them. Our support team can assist with more complex tasks such as creating layouts, search term reports, applying analytics functionality, and creating productions. We will seek your approval for any additional costs for completing complex tasks. Our Head of Public Sector serves as the primary point of contact and account manager. This role is responsible for client success, managing contract governance, tracking budgets and ensuring clients maximise the services offered. Contract governance and ongoing relationship management are led through the processes of our Strategic Client Solutions (SCS) team. The SCS team provides proactive service management, including biannual reviews, monthly reporting (such as storage usage reports and budget tracking) and making technology recommendations.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our onboarding process starts with a kick-off meeting where we agree on the ordering and engagement process, key contacts, timelines, design templates and workflows, define security arrangements and agree on milestones. We also analyse existing skills within your team and determine what levels of training will be required. We then arrange online or face-to-face training using dummy data. We support all our training with comprehensive user guide documentation. We also support each new case with its own engagement process. With any new case, a scoping call will be required to determine data sources, sizes, whereabouts, and requirements specific to the case, such as de-duplication and search criteria. We will use previously agreed, bespoke templates to set up your new workspace, applying case-specific adjustments as required. We will also provide further training on the specific workspace at this stage so that reviewers are introduced to their case-specific data and workflows.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
  • Other
• Other documentation formats: MP4
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We discuss the accessibility requirements of your user base with you and agree on bespoke solutions for every contract. Following these discussions, our existing documentation can be adapted or new documentation created, keeping the audience's accessibility needs in mind. The platform natively supports browser-level accessibility features such as high contrast displays and large fonts. This can be supported through user-level configurations, such as implementing dark mode for light sensitivity or changing highlight colour sets for colour-blind users. While the core vendor documentation is in English, we routinely enhance and customise client-specific documentation, including instructions, presentations and videos, translating these to meet the needs of non-native English speakers. For video content, our integration with AWS Transcribe offers automatic subtitling capabilities for audio and video files. Written documentation can be offered in large fonts and/or high-contrast formats to support those with visual impairments. We use multiple media types in our knowledge transfer programmes, so providing users with the ability to choose the medium that is most accessible for them.
• End-of-contract data extraction: We offer various closure options. We can export the entire database, including all the files and transmit these via sFTP. Data can then be restored in the future if required. Similarly, we can export the documents with the agreed metadata on an encrypted hard drive. Finally, we can delete all data. We also have options for the source data initially supplied for processing. Such source data can be stored for an agreed period, copied and returned, or deleted from our systems. We will only delete the data from our servers once you have confirmed that you can access your archive. We use forensically sound deletion processes, rendering data irretrievable from our systems.
• End-of-contract process: Our case closure letter, issued in advance, outlines all available options and associated costs clearly. Options such as archiving, exports or extended data storage are priced on a sliding scale based on case size, providing visibility of what is included and what may incur additional charges. Deleting all project data from our systems is free of charge, and once completed, we provide a formal certificate of destruction for your records.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• Description of service interface: Reveal offers a modern and highly intuitive user interface that is designed ensure the user is at the centre of every data decision. The platform has a flat learning curve, allowing virtually any litigator or paralegal to begin investigations immediately without reliance on vendors or dedicated IT support. This web-based experience seamlessly integrates comprehensive AI capabilities, dynamic search, and customisable review features. Users navigate interactive visual analytics, such as the Dashboard and Cluster Wheel, which are connected across the platform to facilitate rapid data exploration and culling.
• Accessibility standards: None or don’t know
• Description of accessibility: Reveal incorporates several features intended to maximise usability and efficiency, which can benefit users with diverse needs. Reveal’s interface allows users to customise their review experience. Reveal’s features streamline interactions, providing alternative modes of content consumption, and reducing manual effort. For instance, Reveal’s AI feature automatically transcribes audio and video files, converting traditionally problematic media files into a searchable format for reviewers. Reveal also features image detection technology that machine learning to automatically identify and apply descriptive labels to images. Such features ensure that users remain productive in the platform regardless of their specific access needs.
• Accessibility testing: None.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Reveal's REST API is designed for systems administration, integration, and advanced data management. The API provides programmatic access that allows administrators and developers to configure and manage the platform beyond the graphical user interface (UI). Users can use the API to manage Advanced Analytics Components, such as Brainspace. Reveal's underlying architecture is designed to support programmatic access for custom integrations or sophisticated workflow automation that goes beyond the standard user interface. The functions performed through the API are subject to strict security protocols. All actions performed by users must be authorised based on their assigned user rights.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Reveal provides extensive customisation capabilities to ensure the platform accommodates diverse user roles and complex legal matters. At the document level, Reveal’s interface allows users to customise their review experience while organising documents for review. The user experience is also tailored through Interactive Visual Analytics, such as the Dashboard and Cluster Wheel, where users can filter data views based on metrics like time and custodian to zoom in on relevant content. Furthermore, users engaged in multi-jurisdictional matters can choose to review documents in their native language. Customisation extends deeply into the analytical workflow. Reviewers can construct dynamic search queries by mixing keyword, metadata, and concept searches for highly effective results. Key to tailoring the analytical experience is the ability to utilise and build artificial intelligence (AI) tools: users can curate their own bespoke AI models or select from pre-built models in the AI Model Library to accelerate review or cull data. These models generate predictive scores that automatically prioritise the order of document review, customising the workload based on relevance. Administratively, user permissions and access to specific resources, such as folders or tag profiles, are managed and assigned by Team membership, defining each user’s specific "scope of action".

Scaling

• Independence of resources: Our service gives you complete control over the physical locations where your data is held, the customisations you use, and the security restrictions you wish to apply. We can provide fully managed hosting solutions within our servers or management services for instances hosted within your infrastructure. Our hosting solutions are backed by our parent company, Consilio, to provide scalable, robust solutions that can seamlessly respond to the greatest demands. Consilio has the largest eDisclosure instances in the world and maintains considerable contingent capacity at all times.

Analytics

• Service usage metrics: Yes
• Metrics types: The platform provides flexible reporting tailored to your needs, covering everything from high-level project statistics (e.g., data volumes processed and documents in review) to granular metrics (e.g., pages reviewed per hour or decision overturn rates). Reports can be delivered graphically and numerically via dashboards, with bespoke scripts for alerts and user-friendly insights. In addition, our Strategic Client Solutions (SCS) team specialises in creating custom reports and delivering any additional metrics beyond standard offerings, ensuring complete visibility of service usage.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Reveal, by Reveal Data Corporation Inc

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data export is managed securely and in line with case and user requirements. User permissions strictly govern the ability to download documents, reports, or print content, and case manager approval is required before enabling these features. For large-scale exports, our team can handle these process or end-users can be guided through how to complete these in-house. Exported data can be delivered via Secure FTP for electronic transfer or provided on encrypted physical media, which can be collected or couriered as needed.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Concordance DAT file (standard legal export)
  • PDF (Single Page and Multi-Page)
  • Natives
  • Text files
  • Images (JPG, TIFF, PNG, etc)
  • Media formats including MP3, MP4 and WAV
  • XML
  • Platform-specific archive formats
  • Image Loadfile (OPT, LFP)
  • Loadfile Formats (CSV, HTML, TXT)
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Concordance DAT file (native, text and metadata files)
  • CSV, HTML or TXT loadfiles (native, text and metadata files)
  • Standard files such as Word, Excel and PDF
  • Raw unstructured data such as PST, AD1 and ZIP files
  • OPT files (images)
  • Media formats including MP3, MP4 and WAV
  • Platform-specific archive formats

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: As we have control over hosting, we can offer a range of uptime SLAs to meet your needs. These start at 99.5% of the total number of minutes in each calendar month outside of planned maintenance windows and increase to meet the most demanding requirements. Or we can allow you to take complete control by managing a platform you host within your infrastructure. Our support hours are 08:30 to 18:30, Monday to Friday. Following our initial acknowledgement, you can expect a comprehensive response to low-urgency queries in four business hours, medium-urgency queries in two business hours, and high-urgency queries within one hour, 24/7.
• Approach to resilience: Anexsys is an ISO 27001, ISO 9001 and Cyber Essentials Plus accredited organisation. Our data centres are ISO 27001 and SOC 2 compliant. The processes and security arrangements we have in place (protecting both physical and digital assets) are regularly audited for compliance, internally and externally. We have documented disaster recovery and business continuity procedures. You can view these by request. We provide a completely bespoke approach to resilience, defining the hosting environment and backup regime to meet your unique needs. We have designed our environments for high resilience, implementing multiple layers of redundancy and robust disaster recovery protocols to enable continuous operation outside agreed maintenance windows. Our architectural design utilises redundant systems across primary and secondary UK data centres. Our infrastructure is fully hot-swappable, and all processing systems are on immediate failover for high availability. Resilience is further enhanced by continuous replication and maintaining daily incremental and weekly full backups, with all production data and backups being encrypted. Our infrastructure is highly scalable, ensuring consistent performance even when supporting hundreds of concurrent users.
• Outage reporting: The platform is actively monitored, and in the event of an outage or significant downtime, our in-house infrastructure team will be notified, and project managers will, in turn, issue email alerts to you. Email alerts will contain detailed information regarding our plans to address the issue(s), the root cause, and the expected length of the outage.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access in management interfaces and support channels is controlled by adhering to the Principle of Least Privilege and using Role-Based Access Controls (RBAC). Access is denied by default and granted only when explicitly authorised based on a user’s job function. Permissions are highly granular and flexible, allowing user access to be configured to match the user’s job role. Permissions control which databases and data can be accessed, the ability to import/export data and access to the administrator interface. All actions are immutably logged and fully auditable for accountability. All access granted for troubleshooting is strictly Just-In-Time (JIT) and fully logged.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Anexsys’ policies for handling client data are laid down by our parent, Consilio, and ensure that data and devices are stored securely and protected from unauthorised access while in our possession. We treat all client data as confidential. Our enterprise privacy structures and policies ensure that we meet international, EU and UK privacy regulations. These include the Data Protection Act 2018, the General Data Protection Regulations, the Computer Misuse Act 1990, Part 2 of the Serious Crime Act 2015, the Communications Act 2003, the Regulatory and Investigatory Powers Act 2000, GDPR, HIPAA, ITAR, CCPA, and others. They also include HMG security requirements such as security considerations for protecting OFFICIAL information on a corporate network, the Cloud Security Principles, End User Device security guidance and Browser Security guidance. Compliance with ISO standards ensures that we are committed to meeting your needs and protecting our information and data. Completing regular internal and external audits of our quality and information security management systems is a mechanism to show that we are continually improving and learning.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We control changes to operational software, system upgrades, application module upgrades, vendor-supplied software, product enhancements, and patches through our change management procedure, detailed in our information security management system. Changes are requested through our ticketing system, including full details and a risk assessment for approval. A member of our management team must approve any change where there is a possible alteration to any security controls, a financial cost, or a third-party authorisation is required. Once approved, the infrastructure team follows a specific implementation procedure, including planning, testing, backups, and version control.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our ISO 27001 Information Security Management System documentation documents the management of our technical vulnerabilities. In summary, measures include maintaining an inventory of assets, ensuring a patching regime is adhered to for all devices, and conducting a monthly vulnerability scan by a third party. We also restrict software installation on all company devices and audit devices regularly. OS patches are applied monthly, and application patches are applied as soon as reasonably possible after they are released by the platform vendor.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our platform's configuration and cloud-based infrastructure allow for controlled, audited and monitored access. We have a 24/7 InfoSec team that monitors all our systems. All processes are monitored and restarted automatically, with all storage being highly available, and appropriate distributed consensus is applied to minimise data loss. Only highly available load balancers are accessible from the internet with specific access controls limiting traffic into the private networks where all activity occurs. Our ISO 27001 Information Security Management System documents all monitoring and support processes.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: We use well-defined incident response procedures, triggered by security alerts and 24/7 monitoring by a security operations vendor. This includes escalation protocols to management and client notification protocols, especially if client data is compromised. Users report incidents via a dedicated email address for non-urgent issues, or directly via telephone during working hours. For complex issues, Anexsys diagnoses the problem and seeks a permanent solution while developing workarounds. The process for providing an incident report is client-specific and timelines depend on the nature of the incident. We secure data first, then provide transparency on the issue and detailed proposals for remediation.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Schellman Compliance LLC
• ISO/IEC 27001 accreditation date: Monday 6 January 2025
• What the ISO/IEC 27001 doesn’t cover: All our services are covered by our ISO/IEC 27001 certification.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: British Assessment Bureau Ltd
• ISO 9001 accreditation date: Wednesday 13 August 2025
• What the ISO 9001 doesn’t cover: All our services are covered by our ISO 9001 certification.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 9986e0a6-b241-4960-8f41-12bf072baecc
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 49743f06-ea2e-449d-a61a-50c1c2a1e8b4
• Other security certifications: Yes
• Any other security certifications:
  • HITRUST certified (CSF V9.3)
  • FedRAMP
  • SSAE-16 SOC 1 and SOC 2
  • ISO 9001 and ISO 14001

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@anexsys.com. Tell them what format you need. It will help if you say what assistive technology you use.