Built for sensitive legal work.
Expert witness and interpreter engagements involve confidential case detail, vulnerable data and professional accountability. ExQlo is designed around that from the ground up, not bolted on later.
- Human-reviewed panel
- Explainable AI matching
- Private, encrypted Case Room
- Secure document transfer
- Append-only audit trail
How we vet
A person checks every applicant. An algorithm explains every match. No name reaches a firm until a human has stood behind it.
Structured human review
A member of the ExQlo team works through every application using a structured checklist: qualifications, CV, contactability and red flags. No applicant is auto-approved. The checklist must be completed before anyone is published to the platform.
Explainable AI matching
When a case arrives, the matching engine scores every approved expert against the specific brief, 0–100, and writes a plain-English reason for each fit. A green, amber or red flag accompanies each score, and weak matches are filtered out automatically before a person sees them.
Human sign-off before any name is released
A member of our team reviews the scored shortlist, confirms availability, and may exclude, re-rank or add a candidate, always recording why. Only after that sign-off does a name reach the firm.
You see a considered shortlist, not an algorithm’s guess. And we can tell you exactly why each expert was included.
Our review covers qualifications, CV, contactability and red flags. It is not an identity or document check, and we do not run automated regulatory-body lookups. We say so plainly because trust built on precise claims lasts longer than trust built on broad ones.
Security and data
Private, encrypted Case Room
Each case has its own private, encrypted workspace: the Case Room. Case detail and correspondence are contained there, accessible only to the instructed parties. Encryption is custodial: data is encrypted in transit and at rest, with keys managed by ExQlo and our infrastructure providers rather than by the participants. We describe it that precisely on purpose.
Secure document transfer
Case bundles you share in the Case Room are encrypted on your own device before they leave it, so only you and the other party to the case can open them. ExQlo staff cannot read them, and nor can anyone else on the platform. If your firm already uses iManage, HighQ or NetDocuments, you can share a secure link to that instead. Either way, the expert receives the documents without you ever needing their email address.
Break-glass access, logged with a reason
Case Room transcripts are sealed by default. If the ExQlo operations team ever needs to open one, for a support escalation or dispute, an admin must state a reason before the plaintext is shown, and that reason is permanently logged against them.
Append-only audit trail
Every administrative action on the platform, from vetting decisions to match releases and payment events, is written to a permanent, append-only log. Records cannot be deleted or amended. The log is filterable and exportable.
UK and EU data residency
Data is stored and processed in the UK and EU: Supabase (EU region) for the database and Vercel London for compute. No data leaves UK/EU infrastructure in the normal course of operation.
Special-category (health) data handling
Expert witness cases regularly involve health and medical records: special-category personal data under UK GDPR. The Case Room is scoped to the instructed parties only, and case detail is not indexed or used for any purpose outside the engagement.
Data Processing Agreement →Admin console hardening
Our internal operations console is restricted to an allow-listed team. Every sign-in requires two-factor authentication, sessions time out after 60 minutes of inactivity, and every addition or removal of admin access is logged.
A privacy check before you send
The Case Room is for coordinating the work, not for holding patient records. Before a chat message sends, ExQlo checks on your own device for details that identify a patient, such as an NHS number, a date of birth or a phone number, and warns you if it finds any.
Nothing is blocked. There are times a name has to appear in a professional conversation, and you can send the message when you need to. If you do, the decision is recorded. Most of the time the safer route is to share the detail as a secure document instead, and the warning points you there.
Compliance
CPR Part 35 awareness
Expert witnesses instructed through ExQlo operate under their professional duty to the court as set out in CPR Part 35. The briefing flow is designed with that duty in mind: the case brief captures the instruction context, and the platform’s taxonomy and matching are organised around legal disciplines.
Legal hub, DPA and sub-processor list
Full legal documentation, including our Data Processing Agreement, Privacy Policy, Terms of Service and sub-processor list, is published in our legal hub.
Read our legal docs →UK GDPR and DPA 2018
Data handling follows UK GDPR and the Data Protection Act 2018. Special-category data is processed only for the purposes of the specific engagement and is not retained beyond the engagement lifecycle without a lawful basis.
Privacy Policy →Ready to get started?
Every case is matched by a person. Every name is vetted before you see it.