Home For COLPs How It Works About Contact Run the Diagnostic
Exposure Diagnostic

Find out where
your firm stands.

Ten sections. The output is a precise picture of your firm's governance posture across every relevant regulatory framework. No commitment. No login.

A B C D E F G H I J
Section A

Firm Identity & Regulatory Registration

Establishes your regulatory baseline. Every answer activates or deactivates specific governance engines in your REACH LAW configuration.

A1 *
Firm name and SRA authorisation number
A2 *
SRA-regulated entity type
A3 *
Is the firm also FCA-authorised or FCA-registered?
A4 *
ICO registration is the firm registered for data processing activities?
A5 *
Does the firm conduct AML-regulated work under MLR 2017?
A6
Does the firm handle matters involving OFSI-sanctioned jurisdictions or sanctioned individuals?
A7 *
Approximate number of fee earners at the firm
Section 1 of 10
Section B

AI Tool Ecosystem

Builds the complete governed tool registry. Every tool named becomes a monitored node in your governance architecture.

B1 *
Which AI tools are currently in active use by fee earners at the firm?
B2 *
Has the firm formally approved these tools for use, with written policy?
B3 *
Are fee earners using personal (non-firm) AI accounts for firm work?
B4
Has the firm conducted a data protection impact assessment (DPIA) for any AI tool in use?
Section 2 of 10
Section C

Communication & Document Volume

Establishes throughput requirements for the governance layer. Every answer calibrates processing capacity.

C1 *
Approximate volume of client-facing documents produced per month using AI tools
C2
Are AI tools used to draft or assist with client correspondence (emails, letters)?
C3
Are AI tools used for legal research or case analysis?
Section 3 of 10
Section D

IT & Network Infrastructure

Determines deployment feasibility and integration architecture for your REACH LAW configuration.

D1 *
Primary IT infrastructure model
D2
Does the firm have a dedicated IT function or person responsible for security?
Section 4 of 10
Section E

Regulatory History & Governance State

Establishes your pre-deployment compliance baseline and urgency weighting.

E1 *
Has the firm been subject to an SRA inspection, visit, or investigation in the last three years?
E2
Has the firm received a formal SRA complaint or regulatory notice in the last three years?
E3 *
Does a written AI governance policy currently exist at the firm?
E4 *
If the SRA requested a complete record of how AI-assisted compliance decisions were made in the last 12 months, could the firm produce it?
Section 5 of 10
Section F

Growth & Forward Projection

Ensures the specification is built to your 12-month projected capacity, not today's snapshot.

F1 *
Expected change in fee earner headcount over the next 12 months
F2
Is the firm planning to expand its use of AI tools in the next 12 months?
Section 6 of 10
Section G

Shadow AI Discovery

Surfaces ungoverned AI activity through behavioural indicators. This is often the most significant exposure area.

G1 *
Has the firm formally assessed whether fee earners are using AI tools that have not been approved?
G2
Are fee earners aware of their obligations regarding client data and AI tools?
Section 7 of 10
Section H

COFA Financial Governance

Configures the SRA Accounts Rules 2019 compliance layer for COFA-relevant firms.

H1 *
Does the firm hold client money?
H2
Are AI tools used in any part of the financial management or billing process?
Section 8 of 10
Section I

Continuity, Succession & Incident Response

Configures operational resilience and escalation protocols.

I1
Does the firm have a named deputy or succession plan for the COLP role?
I2
Does the firm have a documented AI incident response procedure?
Section 9 of 10
Section J

COLP Declaration

By completing this declaration you confirm you are the named COLP and that the information provided is accurate to the best of your knowledge.

J1 *
Your full name (as the named COLP)
J2 *
Your email address
J3
How did you hear about REACH LAW?
Declaration
By submitting this diagnostic, I confirm that I am the named Compliance Officer for Legal Practice (COLP) at the firm identified in Section A, that I understand my personal liability for the firm's regulatory compliance including AI governance, and that the information provided throughout this diagnostic is accurate to the best of my knowledge and belief.
Section 10 of 10
Diagnostic complete

Your firm's governance posture

62
Exposure

Your firm has material governance gaps that create direct personal liability exposure for you as the named COLP. These are addressable. The first step is a conversation.

A Firm Identity & Regulatory Registration
Baseline established
B AI Tool Ecosystem
Governance gap
C Communication & Document Volume
Review required
D IT & Network Infrastructure
Adequate
E Regulatory History & Governance State
Critical gap
F Growth & Forward Projection
Capacity risk
G Shadow AI Discovery
Unassessed exposure
H COFA Financial Governance
Low risk
I Continuity & Incident Response
Review required
J COLP Declaration
Complete

The next step is a conversation.

Your diagnostic output has been noted. A REACH LAW deployment specification can be built from these answers. No obligation to proceed.

Talk to REACH LAW How it works