COLP and risk partner
The question is not whether the firm uses AI. It is whether you can show what it did.
Sources are a closed list, citations carry verdicts, and every run, share and check is on a register you can export or print for inspection.
| Date | Event | Matter | Actor | Result |
|---|---|---|---|---|
| 02 Sep | Run completed | CF-2026-0184 | R. Okafor | Verified |
| 02 Sep | Client share created | CF-2026-0184 | R. Okafor | Verified |
| 01 Sep | Conflict check | CF-2026-0190 | System | Needs a check |
The audit register: runs, shares, conflict checks, each with an owner and a passed or failed result.
The day this changes
Before
A practice group started using a general assistant, a client asked whether their documents had gone into it, and now the answer has to come from you.
In Ayinde and Al-Haroun the Divisional Court dealt with fabricated authorities. The SRA has written on AI risk since November 2023 and on the COLP's responsibility since February 2026.
The direction is consistent: you are expected to be able to show how the firm's view was formed.
After
Sources are a closed list of free primary law, and paywalled databases are refused, so fabricated authority is designed out rather than warned against.
Every run, share, verification result and conflict check is on a register you can export as a spreadsheet or print as an inspection bundle with a content digest.
The hold policy, if switched on, holds work citing a failed authority until an owner overrides it, and records the override.
Grounded on the matter
Work happens inside a matter that opens with a conflict check, and restricted matters can be redacted for people outside them. This is a conflict check with restricted-matter redaction, not an ethical wall or an information barrier, and the page says so. The operational record is written once, on the matter, so what a fee-earner did is attributable rather than reconstructed after the fact.
See how matters workClient
Calder & Finch LLP
Reference
CF-2026-0184
Practice area
Employment
Jurisdiction
England and Wales
Responsible partner
R. Okafor
Status
Open
Conflict check on open: clear across 214 matters searched.
Clear- Matter opened: conflict check run automatically.
- Documents added: employment contract, board minutes.
- Contract Agent run completed: 6 action items, 14 authorities.
The matter, with the conflict check and restricted-matter redaction.
A deliverable, not a chat
The register projects from the operational record into six families of event, one plain-English line each, with an outcome. Export it as a CSV for analysis, or print a inspection bundle with a content digest, a SHA-256 over the exported rows, not a tamper-evident hash chain, and the bundle does not claim to be one. What you take to the risk committee is a document, not a screen you have to describe.
See the audit register| Date | Event | Matter | Actor | Result |
|---|---|---|---|---|
| 02 Sep | Run completed | CF-2026-0184 | R. Okafor | Verified |
| 02 Sep | Client share created | CF-2026-0184 | R. Okafor | Verified |
| 01 Sep | Conflict check | CF-2026-0190 | System | Needs a check |
The register projected into six event families, each with an outcome.
Verified, then shareable
Every citation carries a verdict, verified, needs a check, or not found, and the firm policy can hold any deliverable citing a failed authority until an owner overrides it with a note. Client sharing is its own area: links carry a passcode by default, can have an email gate and an expiry, log every view, and can be revoked. The controls are the record you can inspect.
See how verification worksShare link
Expires
7 days
Views logged
3
- client@calderfinch.exampleOpened, 09:14
- client@calderfinch.exampleOpened, 14:02
A share link with a passcode, an expiry, logged views, revocable.
The register is in the product on every plan; exportable audit logs and retention controls are on Business. Run costs are observed by matter, not modelled.
See pricingObjections
I have to be able to show what it did.
Every run, share, verification result and conflict check is on a register you can export as a spreadsheet or print as an inspection bundle with a content digest.
See the audit registerOur documents are confidential.
Files sit in Microsoft Azure UK, encrypted in transit and at rest, scoped to the matter, and never used to train a model. The security statement sets out the detail.
Read the security statementWe already have Copilot.
A general assistant answers from the open web and will cite a case that does not exist. This works from a closed list of primary law and marks each authority verified, needs a check, or not found.
See how verification worksTake an inspection bundle to your risk committee.
Read the security statement, or spend twenty minutes on a demo firm to see the register first.