What is the 'hold work with a failed authority' setting?

A firm-level switch: any work citing an authority the firm checked and could not confirm cannot be shared externally or exported until an owner overrides it with a note.

Is the content digest a blockchain or a hash chain?

No. It is a SHA-256 digest over the exact rows exported: two exports of the same window match, one altered row does not. We do not describe it as more than that.

What is the difference between a seat role and a staffing grade?

Owner, admin and member decide what someone can do in the product. Partner, fee-earner, paralegal and business services describe supervision and billing, and are separate from access.

Which plan includes exportable audit logs?

The register itself is available on every plan; exportable audit logs with retention controls are on Business.

What the firm did with the AI, on whose authority, and whether the checks passed.

One chronological audit and compliance register. Not five tables and a spreadsheet someone maintains by hand.

Governance and audit

Book a 20-minute walkthrough Start free

No credit card required

Audit register · Calder & Finch LLP · last 24 hours

5 of 8 entries · digest sha-256

Time	Who	Type	Entry	Matter
09:36	j.okafor	Document	Disclosure_letter_v4.docx uploaded · 18 pages	HAL-2026-0031
09:30	e.vance	Conflict check	Conflict check on open · no matches across 38 matters	RC-2026-0009
09:12	admin	Member	p.hartley added · role: Associate · 4 matters	Workspace
08:55	r.chen	Run	Due Diligence Agent · review grid · 12 documents	HAL-2026-0031
08:40	r.chen	Verification	Verify all · 6 authorities · 6 verified	HAL-2026-0031

Exports carry a content digest so a reviewer can confirm nothing was edited after the fact.

The Audit & compliance register: every piece of AI work, who authorised it, and whether the checks passed.

Six families of event, one shape

Agent runs, verification checks, share links, documents, members and conflict checks each read as a plain-English line with one of four outcomes. 'Attention' is not a soft failure: it means the work completed and a check on it did not pass, and that row earns its own level rather than hiding inside 'ok'.

Read the verification page

The Audit & compliance register: every piece of AI work the firm produced, who authorised it and whether the checks passed, with period, matter and person filters, totals, and an Export button. — The Audit & compliance register: fifty events in the period, with type, event, outcome, who, matter and credits.

Derived from the work, not written alongside it

There is no separate audit table maintained in parallel. The register is projected from the rows that already record the truth, so it cannot quietly disagree with the runs, checks and share links it describes.

Read the security statement

The Activity log: every run and chat in the firm, with who ran it, the type, the status and when. — The Activity log the register is projected from: every run and chat with who ran it and when.

A file to analyse, a file to hand over

CSV export for anyone who wants to sort it. The printable bundle is self-contained HTML you print to PDF: a cover page with the firm, the period and the totals, events grouped by matter, and a content digest: a SHA-256 over the exact rows exported. It is a content digest, not a tamper-evident hash chain, and the bundle says exactly that.

Book a 20-minute walkthrough

The Export menu on the audit register: a spreadsheet with every event in the period, one row each, or a printable pack grouped by matter with an integrity checkpoint. — The Export menu: a spreadsheet of every event, or a printable pack grouped by matter with an integrity checkpoint.

From matter to signed memo.

Four steps, and the fourth one is yours: nothing leaves the workspace until a supervising lawyer has read the verdicts.

01
Work happens
A run, a share, a conflict check: the operational record is written once.
02
The register projects from it
Six families of event, one plain-English line each, with an outcome.
03
Export or print
CSV for analysis, or a printable bundle with a content digest.
04
The hold policy, if switched on
A failed authority holds work until an owner overrides it, with a note.

What it does not do.

The content digest is a SHA-256 over the exported rows, not a tamper-evident hash chain, and the bundle does not claim to be one.
The register is in the product on every plan; exportable audit logs and retention controls are on Business.
This is a conflict check with restricted-matter redaction, not an ethical wall or an information barrier.

Related.

Common questions.

Start free

Take the printable bundle to your risk committee.

Twenty minutes, and we will generate one on a demo firm so you can see the format first.

Book a 20-minute walkthrough Read the security statement