How legal businesses in the UK and India can grow with AI, automation and custom software

By Cogitix · 3 November 2026

The examples are patterns, not client stories. Regulator and ombudsman figures are theirs, not a census of every UK firm. The India notes are a reading of the Rules and of published columns. Cogitix is an AI agency that builds software for clients worldwide. It is not a law firm and it does not supervise firms.

What file is checked before work continues?

A conveyancing matter and a private-client intake both need a record a later reviewer can reconstruct. That record is still split across email, a personal phone, a shared drive and a checklist that grew after the last file review.

On 5 November 2025 the Solicitors Regulation Authority published a thematic review of source of funds and source of wealth. For 2024–2025 it inspected or desk-reviewed 833 firms and 5,873 files. It says 5,026 of those files required source of funds and/or source of wealth checks. Of those 5,026, 11% (648) contained no source of funds checks. It gave feedback to 343 firms, which it states as 41%. Scrutiny was inadequate on 18% of the files reviewed, and on 8% the information gathered did not match the ledger. Fifty firms (6%) were referred after these issues appeared among other failures. Some fee earners knew the source of funds and left no trail of the enquiries, or of why a check was skipped. The review says record keeping still needs to improve.

The review says records must be enough to reconstruct the transaction. Its questions and answers, updated on 28 January 2026, say source of funds information should be obtained early enough to scrutinise. Bank statements have to be read against what the client says. A UK bank account is not proof the funds are legitimate.

Why does a split acceptance file hurt?

A matter can look open on the case system while nobody can say what was asked, what arrived, and who decided it was enough. The client feels the silence. The file review finds the gap later.

The Legal Ombudsman covers 1 April 2025 to 31 March 2026. It received 14,259 new complaints, 37% more than 10,447, and accepted 8,412, 16% more than 7,203. Poor communication was 24% of complaint types and delay or failure to progress was 22%, together 46%. Residential conveyancing was 36% of accepted complaints and 886 of the 1,209 extra accepted complaints. Twenty-five per cent of consumers said they received no final response. Remedies were £3.7 million. Those are complaint counts, not source-of-funds counts.

An LSSA page of 4 August 2026 reports a Dye & Durham roundtable chaired by Amy Bell of Teal Compliance. Thirteen participants described thick files kept because they are easier to defend, fee earners absorbing unbillable compliance work, and clients asked for the same evidence by more than one firm. The page says automation on an over-collecting checklist only collects faster.

Interactive Code, last checked on 19 September 2026, says the cost is reconstructing what was requested, what arrived, and whether anyone looked, by opening files, so the work happens rarely. That is a supplier's description, not a regulator's statistic.

Where should a firm start?

Keep the case system, the ledger and the person who may accept a client. Add one record for one queue: a conveyancing matter that needs a source of funds check, or an Indian private-client intake that collects an identity document. Each field has a source, a status of asked, arrived, looked at, not required or waiting, and the name that accepted it. Waiting is honest. Keep a rollback. That is where digital transformation consulting should start. Do not begin by scanning every closed file.

How do four steps put the matter on one record?

1. Write the request once

Store the matter, the date, what was asked, the channel, and the document that came back. For a firm the Solicitors Regulation Authority supervises, also store the client's explanation of the money, and the reason if a check was treated as unnecessary. For an Indian firm, store the itemised personal data, the purpose, and whether a standalone notice was given, separate from the advice. Capture the arrival with custom web development or a mobile app the fee earner already opens, so a photograph does not stay only on a personal phone.

2. Ask the person who knows

An assistant may chase a missing document or draft the reminder. The draft stays a draft until a person sends it. Software must not decide that a bank statement is enough, invent a source of funds, or treat a chat reply as a notice. That limit is AI agent integration, as on autonomous agents.

3. A person accepts the field before work continues

A model may list example documents, such as payslips or a grant of probate. A person accepts the field, or records why this matter did not need the check. Software can hold the next stage while a status is waiting, a ledger line has no evidence, or an Indian identity document has no notice status. It cannot decide the risk, accept the client, or send an unapproved message.

4. Keep one pack a person has read

The UK pack reconstructs the transaction: what was asked, what arrived, who looked, and the rationale. The India pack keeps the notice apart from the advice, with the itemised data, the purpose, and the withdrawal path. A short explanation of why the document is needed, approved by the firm, is what the client sees. The LSSA report says friction often comes from asking again without explaining why. That client-facing answer is the same discipline as answer engine optimisation and generative engine optimisation. Several offices on one history is cloud-based SaaS. A workflow other firms will run is end-to-end product development.

What is different for UK law firms?

The questions and answers say a source of funds check is required in defined cases, including a politically exposed person and a high-risk third country, and that transactions must be scrutinised where necessary so the source stays consistent with what the firm knows. If customer due diligence cannot be completed, the firm must not carry out a transaction for the customer, must end the relationship, and must consider a disclosure. Software can show that those fields are waiting. It cannot make the disclosure.

The review says time pressure is hardest in smaller firms, some clients will not discuss money, and some fee earners hesitate with a long-standing client. The LSSA page says the firm should agree what sufficient means for each risk tier before the matter starts. A British pattern, not a client of Cogitix: one matter, the source known or waiting, and a named person. Of 42 suspicious activity reports the regulator sent to the National Crime Agency, 73% were conveyancing. That is a reason to start with that queue, not a reason for software to draft a report. See the real estate guide and the fintech guide.

What is different in India?

The Digital Personal Data Protection Rules, 2025 were notified on 13 November 2025 as G.S.R. 846(E). Rules 1, 2 and 17 to 21 started that day. Rule 4 starts one year later. Rules 3, 5 to 16, 22 and 23 start eighteen months later, on 13 May 2027. Rule 3 says the notice must stand alone, in plain language, with an itemised list of the personal data and the purpose, and a way to withdraw consent that is as easy as giving it.

A Bar and Bench column of 4 October 2025, written before the Rules, reads the Act as applying to law firms because they decide how client personal data is processed. It says consent must be recorded before collection, and that every collection point, including the website, has to be found. It treats that as work for the whole firm, not only an IT team. This article does not decide who is a significant data fiduciary, and it states no penalty.

A LiveLaw column of 3 September 2026 by Kritika Krishnamurthy, which the page says is not legal advice, describes client details left in WhatsApp groups, contact lists and drives the firm does not control. It says most Indian firms are not yet set up to honour those rights. LawSathi on 26 May 2026, a vendor blog, says WhatsApp records neither a formal consent nor who opened a document.

An Indian pattern, not a client of Cogitix: the notice apart from the advice, a status of given, withdrawn or waiting, and a named person. A hearing time can stay on a chat. The identity document cannot. On 3 November 2026 rule 3 is not yet in force. The date in the Rules is 13 May 2027. Hotels use the hospitality guide. The same sequence is in how to improve workflows using AI.

Should you buy, configure, or build?

Buy or configure when the product already stores the request, the arrival, the status, the rationale and the person who accepted it, and can hold the next stage while a field is waiting. Build when one office must hold a source-of-funds file and an Indian notice file, when a document sent to a personal phone has to land on the matter, or when the case system will not export a trail that can reconstruct the transaction. A person at the firm still accepts the client. Cogitix does not file a report in the firm's place.

What does a 90-day pilot include?

Days 1 to 15. One queue. List the fields, who may see identity documents and bank statements, and the rollback.

Days 16 to 45. One team. The next stage proceeds only after a person accepts the field. A reminder goes out only after a person sends it.

Days 46 to 75. Recount what is still waiting: no arrival, an arrival nobody marked as looked at, no rationale, or an Indian intake with no notice status. This guide has no benchmark percentage.

Days 76 to 90. Add a second matter type on its own file, or stop. It does not inherit the first rationale or the first notice.

How does Cogitix help?

Cogitix is an AI agency. It builds AI agents, AI automation and AI-powered custom software, and it delivers working software quickly for clients worldwide. The canonical site is https://www.cogitix.io/. The public email is hello@cogitix.io. No phone number is published. Hours on the site are Monday to Saturday, 9:00 am to 6:00 pm. Describe one matter type on the contact page. More about the company is on the about page.