Live Compliance Register

External Action Items Register

8 external actions required before full commercial launch — CourtCraft Advocate Ltd

ICO Registration No. ZB812547 | Last updated: May 2026

Lawful Basis Declarations — UK GDPR

Article 6 & Article 9 lawful bases for all processing activities

Article 6(1)(b)

Contract Performance

Primary basis for all core platform processing — account management, case data storage, document generation, AI-assisted legal guidance, and McKenzie Friend session booking.

Applies to: Account data, case data, document generation, AI guidance, session booking

Article 6(1)(c)

Legal Obligation

Secondary basis for processing required by law — GDPR compliance obligations, ICO breach notification, HMRC financial record retention, and security logging.

Applies to: Security logs, breach notification, financial records, GDPR compliance

Article 9(2)(f)

Legal Claims (Special Category)

Basis for processing Article 9 special category data — domestic abuse disclosures, health information, mental health data, and financial vulnerability data in the context of family law proceedings.

Applies to: Domestic abuse data, health data, mental health data, financial vulnerability

Data Minimisation Enforcement

Under UK GDPR Article 5(1)(c), CourtCraft Advocate collects and processes only the data strictly necessary for the identified purpose. Users are not prompted to provide data not required for the active tool. Special category data (Article 9) is processed only when directly relevant to the active legal proceedings.

Compliance Register Dashboard

Click any row to expand details. Use the edit button to update status, owner, and target date.

Overall Completion0%

0

Complete

0

In Progress

0

Blocked

8

Not Started

EA-001CriticalInternational Data Transfers

Voyage AI — IDTA / Article 46 Transfer Mechanism

Art. 46 UK GDPR

EA-002CriticalInternational Data Transfers

Anthropic PBC — IDTA + UK-US Data Bridge Trigger Clause

Art. 46 UK GDPR

EA-003HighArchitecture

Tiered Data Architecture Enforcement

UK GDPR Art. 25 / Art. 5(1)(f)

EA-004CriticalData Residency⚠ OVERDUE

Supabase Region Confirmation (eu-west-2)

UK GDPR Art. 44 / Art. 5(1)(f)

EA-005HighInsurance

Professional Indemnity & Cyber Insurance

Pre-Phase 2 Gate

EA-006HighLegal Opinion

LSA 2007 Written Legal Opinion

LSA 2007 ss.12–18

EA-007MediumLicensing

TNA Computational Analysis Licence

TNA Licence

EA-008MediumTechnical Validation

Phase 0 Kill-Switch Test (Gate Evidence G11)

Gate Evidence G11

Priority Order & Blockers

RefItemBlocksTarget
EA-004Supabase region confirmationAll data storageDay 1
EA-001Voyage AI IDTAEmbeddings / RAGWeek 1
EA-002Anthropic IDTA / AWS BedrockAI responsesWeek 2
EA-008Phase 0 kill-switch test (G11)Architecture sign-offWeek 2
EA-005E&O + Cyber insurancePhase 2 launchWeek 3
EA-007TNA Computational Analysis LicenceRAG corpus constructionWeek 4
EA-006LSA 2007 legal opinionInvestor credibility / paid usersMonth 2
EA-003Tiered data architecture rebuildFull GDPR complianceMonth 3

© 2024–2026 CourtCraft Advocate™ Ltd. All rights reserved.