Numo is case and document software for UK family law practice. It runs a matter from intake to final order, holds the facts, dates, money and documents in one place, reviews documents against the firm's own playbook, and records that a named qualified person approved anything that leaves the firm.

Does Numo cover Scotland and Northern Ireland?

Yes. It holds a separate knowledge pack for England and Wales, Scotland and Northern Ireland, resolves which one governs a matter from the connecting factors at intake, and blocks another jurisdiction's vocabulary from reaching an outgoing draft.

Is client data used to train an AI model?

No. Content is sent to the model provider's commercial interface for the length of a request and is not used to train their models under those terms. The provider is named on the sub-processors page.

Can the assistant send an email or file a document on its own?

No. It prepares. Service, filing and sending each need a named person's decision recorded against the exact version, and every action in a connected account is asked for separately in a card showing exactly what would happen.

How much does Numo cost?

It is priced per firm rather than per fee earner, starting at £59.99 a month plus VAT for a sole practitioner, with tiers for practices up to seven, up to fifteen, and firms of any size.

What happens to a document that contains instructions aimed at an AI?

It is quarantined before any model reads it and listed so a person knows it exists and reads it themselves. Text inside a document is treated as evidence about the matter, never as a command.

Legal

Sub-processors

This is the complete list of organisations that process a firm’s data on our behalf. It is short on purpose. Each one is bound by a written contract containing the terms UK GDPR requires, and we remain responsible for what they do as if we had done it ourselves.

Last updated 23 September 2026

Where the product runs

These process matter data as part of the service. A firm cannot use Numo Law without them.

Supplier	What it does	Where	What reaches it
Supabase	Database, file storage, authentication and the server functions that hold every key	Ireland, on AWS (eu-west-1)	Everything a firm puts in: matters, people, files, the audit trail, and the vault as ciphertext
Amazon Web Services	The underlying infrastructure our database and storage run on, contracted through Supabase	Ireland	The same data, at rest and encrypted
Vercel	Serves the applications and this website	London and Dublin regions, with a global edge network	Requests and responses in transit, plus operational logs. No matter data is stored here

The model provider

Supplier	What it does	Where	What reaches it
Anthropic	Runs the language models behind Numo Bot: research, drafting, extraction and classification	United States	Only the part of a matter a question needs, for the length of the request

We use Anthropic’s commercial API terms, under which inputs and outputs are not used to train their models. Requests are made over an encrypted connection from our own server functions, never from a browser, so a firm’s data never passes through a client machine on the way.

Vault objects are never sent unless the firm has unlocked the vault in that session and recorded a consent to analyse the specific object. Content is selected by retrieval rather than sent wholesale, and the person asking can only ever cause data they are themselves entitled to see to be sent.

This is a transfer to the United States. It is covered by the International Data Transfer Addendum to the European Commission’s standard contractual clauses, together with our transfer risk assessment, which we will provide to a firm on request.

Email

Supplier	What it does	Where	What reaches it
Brevo	Sends transactional email: signing invitations, notifications, and account messages	European Union, with group companies outside the EEA	The recipient's name and email address, and the content of the message we send them

Signing invitations carry a secure link, not the document itself, so the document is read inside the product rather than travelling as an attachment. Where a firm connects its own Gmail account, mail sent through that connection does not touch this supplier at all: it goes through the firm’s own account.

Services a firm connects for itself

These are not our sub-processors. They are the firm’s own accounts, connected by one of its people, and data reaches them because somebody allowed an action. We list them so the picture is complete.

Service	What it does	What reaches it
Google Workspace: Gmail, Drive, Docs, Sheets, Calendar	Sending, drafting, storing and scheduling in the firm's own account	Whatever a permitted action contains, at the moment it is allowed
Google Maps Platform	Place search, addresses and imagery for the place finder	The address typed and the location looked at
Dropbox	Bringing documents in from the firm's own storage	The document requested
Calendly	Appointments brought into the matter	The appointment details

Each connection is separate, held for one person, and revocable on its own. The detail is on the integrations page.

Public sources we read from

Research reads from public registers and from the open web. No personal data from a matter is sent to them: a request is a query for a provision or a judgment, not a description of your client.

legislation.gov.uk for statutes and statutory instruments, read at the provision.
Find Case Law at the National Archives, for judgments in England and Wales.
The open web, where practice guidance, fee levels and form versions move faster than the statute books. Every page read is named under the answer.

Changes to this list

We give account administrators at least 30 days’ notice by email before adding a sub-processor. A firm can object within that period, and the terms of service set out what happens if we cannot resolve the objection.

To be told when this page changes, email support@numolaw.com and ask to be added to the notification list.