Built for confidential work.
Your client's financial life shouldn't leave a trace it doesn't need to.
UK-hosted, encrypted in transit and at rest.
Documents your client uploads, and the figures Candid extracts from them, are stored in the UK (London region) and are not replicated outside UK jurisdiction. The AI extraction step runs elsewhere: to pull the figures for Form E, an uploaded document is sent to our AI provider, Anthropic, for processing in the United States — see the next section for how that transfer is governed.
Data is encrypted in transit with TLS, so a document moving between your client's browser and Candid can't be read in flight. Uploaded documents and case records are encrypted at rest, so the underlying storage is unreadable without the right keys.
Access to case data inside Candid is limited to the people who need it — your firm's authorised users, and the small number of Candid staff whose role requires it, under the terms of your firm's DPA. A user can't browse into a case file they haven't been granted access to.
Not used to train AI models.
Many AI products quietly use customer data to improve their underlying models. Candid doesn't. Under Anthropic's commercial terms, client documents and the figures extracted from them aren't used to train or fine-tune any AI model — ours or a third party's.
Where Candid uses an AI model to extract or cross-check figures, the document is sent to Anthropic's API for the single purpose of processing that request. Anthropic retains API inputs and outputs for a limited period for trust-and-safety purposes only, and does not use them to train models. We have asked Anthropic for a zero-retention arrangement, under which nothing would be stored after the response; until that is confirmed, Anthropic's standard commercial retention applies.
In practice, a client's financial history does not become training data for anyone's product — not while your firm uses Candid, and not after.
You're the controller, we're the processor.
Client data is handled in line with the Data Protection Act 2018 and UK GDPR.
Data Processing Agreement available. A DPA is signed with every firm before onboarding. Scribe Services Ltd is ICO registered, reference ZB186337.
Under UK GDPR, your firm is the data controller for every client's information — you decide what's collected and why, and you remain accountable to your clients. Candid acts strictly as a data processor, handling that data only on your firm's instructions, under a Data Processing Agreement agreed at onboarding.
Every action taken on a case — a document uploaded, a figure extracted, a discrepancy flagged, an edit made — is recorded in a full audit trail your firm can review. If a client or the court ever asks how a figure was arrived at, that trail is there.
Candid never finalises or submits a disclosure on its own. Every document Candid assembles and checks sits in a review state until a qualified solicitor at your firm explicitly signs off — nothing moves to a client's solicitor, let alone the court, without that step.