a 100-person UK claims firm, rebuilt AI-first on the sovereign estate — the AI Native Solutions offer, walkable
100 seats · 90 agents · 10 humans at the doors · all four laws held.
The stack this firm rents today: £148,020/yr in SaaS and per-seat AI —
derived line by line below, never asserted. The sovereign build replaces the rented ninety
with owned tools and local models; the humans keep exactly the seats that must be human. Watch this company RUN — Northgate Claims, a fictional day, live →
💷 the money door a seat is human if and only if it holds movement of real money. Enforced by the gated org law, not by an org chart drawing.
⚖ the legal door a seat is human if and only if it holds a legal signature. Enforced by the gated org law, not by an org chart drawing.
◈ the taste door a seat is human if and only if it holds taste and judgment calls. Enforced by the gated org law, not by an org chart drawing.
🤝 the client-trust door a seat is human if and only if it holds the client-trust moments — the closes, the hard conversations. Enforced by the gated org law, not by an org chart drawing.
Answers every inbound channel (phone transcript, webform, email, WhatsApp) all day: captures first notification of loss, structures it into a case record, triages severity and vertical, and books the follow-up. Never closes, never promises outcomes.
the wire: CRM write access, telephony/transcription feed, webform and mailbox hooks, triage rubric, published service-scope list so it refuses out-of-scope claims loudly
Eligibility and fraud pre-screen agent× 4DECLARED
Runs every new case through eligibility rules, limitation-date checks, duplicate-claim detection, and fraud-signal screens; flags anything ambiguous to a human queue rather than silently rejecting.
the wire: Read access to case records, limitation/eligibility rule tables, CIFAS/fraud-signal data feed, a refusal log the compliance monitors can audit
the honest gap: No telephony/call-scripting layer and no lead-source analytics beyond what the CRM records. Bigger structural point: onboarding data is device-local IndexedDB — a 100-person intake team on separate machines has no shared queue; there is no multi-user sync anywhere in this suite.
Owns a caseload end to end: chases evidence, updates clients on schedule, computes quantum with a gated calculator kernel, drafts next-step recommendations, and keeps every case file complete. All settlement offers and hard conversations are queued to humans, never spoken by the agent.
the wire: CRM full case access, gated quantum-calculation kernel, client-comms templates, diary/SLA engine, escalation queue wiring to the human seats
Evidence gatherer agent× 5DECLARED
All day it requests, chases and files third-party evidence: medical records, engineer reports, bank statements, insurer correspondence. Tracks what is outstanding per case and nags until it lands.
the wire: Outbound email/letter rail, document store write access, per-case evidence checklists, DSAR-request templates, consent records proving authority to request
Negotiation-prep agent× 4DECLARED
Builds the settlement position: comparable outcomes, quantum ranges, counterparty history, and a fully drafted offer or counter-offer. The prep rides whole to the human signer — the agent prepares, it never commits.
the wire: Historic outcomes dataset, case file read access, offer templates, the unsigned-door queue where prepared settlements wait for human sign-off
Settlement sign-off counsel× 1⚖ holds the legal door
LEGAL SIGNATURE: settlement acceptances, letters before action, and litigation steps bind the client legally; the doctrine says sign-legal is a key-gated door only a human turns. Also judgment on which fights to pick.
Escalation and vulnerable-client handler× 1🤝 holds the client-trust door
CLIENT-TRUST MOMENTS: bereavement, distress, vulnerability flags, and complaints that have gone hot are the hard conversations — a human voice or the trust dies. Also the judgment call on goodwill gestures.
the honest gap: Single-file and per-device: no shared caseload, no handler workload allocation, no supervision/file-review workflow, no court-deadline diary shared across fee earners. fallclaim is explicitly a research aid, not a system of record for 100 concurrent handlers.
Produces every outbound document: LBAs, claim packs, court bundles, DSAR responses, client updates — from gated templates, correctly paginated and indexed. Anything requiring signature lands in the unsigned queue, not the post.
the wire: Template library (jurisdiction-correct, versioned), case data read access, document store, the signature queue, a ui-gate style lint that blocks malformed bundles
Ingest, OCR and redaction agent× 3DECLARED
Turns every inbound PDF, photo and scan into searchable, classified, correctly-filed case documents; redacts third-party personal data before anything is shared onward.
the wire: OCR pipeline, document classifier, redaction rules signed off by compliance, write access to the document store, quarantine bucket for unreadable files
the honest gap: fallsignature is cryptographic content signing, not a client-facing e-signature ceremony (DocuSign-style counterparty flow with identity capture) — a claims firm getting CFAs signed remotely still needs that. No document-management repository: versioning, precedent library, or matter-linked filing. falljustice's lba.mjs response periods are ungated — the letter-before-action deadline arithmetic never goes near the working-day rule.
Keeps the books all day: posts transactions, reconciles the client-money account daily against bank feeds, computes fee deductions per the disclosed schedule, and raises invoices. It can count money; it can never move it.
the wire: Read-only bank feeds, accounting system write access, the disclosed fee schedule as data, CASS reconciliation rules, daily-break alerting to the client money officer
Payment-run preparation agent× 2DECLARED
Assembles every payment run — client settlements out of escrow, supplier invoices, refunds — fully verified against the ledger, then queues it unsigned. The scoreboard has no field for money by construction; the run waits for the key.
the wire: Ledger read access, payee verification data, the unsigned payment-door queue, zero payment-execution credentials by construction
Finance director (payment key-holder)× 1💷 holds the money door
MONEY MOVEMENT: every outbound payment is a door only this seat's key turns. Reviews the agent-prepared run, verifies, signs, releases. The 10% is finance clicks — this is the archetypal one.
Client money (escrow) officer× 1💷 holds the money door
MONEY MOVEMENT plus LEGAL SIGNATURE: releases settlement funds from the client account and personally attests the CASS-style client-money reconciliations regulators hold a named human to.
the honest gap: The escrow register in fallclaimpractice is a device-local IDB record, not a regulated client-account with bank-feed reconciliation — for real CMC client money handling that reconciliation layer does not exist. No payroll engine adequate for 100 staff (fallbooks is RTI-shaped, not a payroll run). fallledger's display/filter paths still parse amounts their own way for restored files. konomium-vault (the encrypted accounting crown jewel) exists but was not audited this pass.
Runs the DSAR engine all day: locates every record on a data subject, compiles, redacts third parties, and computes the statutory deadline in real working days rather than printing the rule. Responses queue for human release when judgment calls on exemptions arise.
the wire: Search access across all data stores, redaction pipeline, working-day deadline calculator (computed, never quoted), ICO guidance as versioned data, release queue
Compliance monitoring agent× 3DECLARED
Audits the other agents continuously: samples calls, letters, and case decisions against FCA CMCOB rules, fee-disclosure requirements, and financial-promotions rules; every breach candidate goes to the human head with evidence attached.
the wire: Read access to all comms and case logs, CMCOB rulebook as testable checks, sampling scheduler, breach-evidence store, no power to suppress its own findings
Head of compliance (SMF holder)× 1⚖ holds the legal door
LEGAL SIGNATURE: FCA attestations, regulatory returns, breach notifications and DSAR exemption calls carry personal regulatory liability — a named human under the Senior Managers regime, not delegable to an agent.
the honest gap: Honest caveats: falljustice still ships without a bank-holiday list (the kernel accepts one, nothing supplies it, so every deadline carries the caveat). No AML/KYC identity-verification tooling. No FCA regulatory-returns filing (RMAR-style submissions) — fallclaimpractice tracks the numbers but nothing files them. No file-audit/supervision workflow for a compliance team.
Runs people-admin all day: payroll preparation (queued unsigned to finance), onboarding paperwork, right-to-work checks, leave tracking, training-record upkeep for the ten humans and the agent fleet's access rosters.
the wire: HRIS access, payroll-prep templates feeding the unsigned payment queue, right-to-work check API, training-record store
Head of people× 1⚖ holds the legal door
CLIENT-TRUST-CLASS HARD CONVERSATIONS turned inward, plus LEGAL SIGNATURE: hiring decisions, employment contracts, disciplinaries and dismissals are judgment calls with legal weight that a human owns face to face.
the honest gap: Recruitment is covered; HR proper is not. No HRIS: absence/holiday tracking, right-to-work records, performance reviews, training/CPD records, disciplinary process — none of it exists in the estate. fallgrade (portfolio assessment) is ungated and unexamined. For a 100-person firm this is the thinnest department.
Produces and posts content on the sanctioned rail (approved API automation, never puppeting a human login), runs the measure-adjust-post-better loop, drafts campaigns, and scores inbound leads. Posting is auto work by doctrine; taste sign-off is not.
the wire: Sanctioned posting rail with frozen rate limits, analytics read access, brand style rules as data, the taste editor's approval queue for anything novel, outbox for pre-rail drafts
Sales qualifier and nurture agent× 3DECLARED
Works the pipeline all day: qualifies inbound leads, answers factual product questions, books the close meetings into human closers' diaries, and keeps warm leads warm. It never states fees as final and never closes.
the wire: CRM pipeline access, closers' calendars, approved FAQ corpus, fee-disclosure scripts marked as compliance-locked text
Client closer× 2💷 holds the money door
CLIENT-TRUST MOMENTS: the close — the conversation where a claimant decides to trust the firm with their case and their money — is named in the law itself. Deals and relationships stay human; the registry says so.
Brand and taste editor× 1◈ holds the taste door
TASTE: the last inch of visual and verbal judgment — what the firm sounds like, which campaigns run, what never ships. Agents draft everything; this seat says yes, no, or not-like-that.
the honest gap: No claims-specific lead-buying/referral marketplace integration (how CMCs actually acquire volume). fallmail is P2P DID-addressed encrypted messaging, not SMTP — the firm's ordinary business email/mailbox is not covered by the estate at all; falllist covers only outbound broadcast via bring-your-own provider.
Keeps the estate running: deploys, monitors, restarts, patches, capacity-plans; keeps the local models up so grunt work never silently spills to rented cloud. Loud stop, never silent failover.
the wire: Infra credentials scoped to non-production-data operations, monitoring stack, deploy pipelines, the health-gate endpoints, alert routing to humans for anything irreversible
Security and gate agent× 2DECLARED
Runs the trust rail on the firm's own code all day: mutation-gates every kernel, fuzzes the pure logic, sweeps for leaked secrets and orphaned access, and blocks any deploy whose gate is not clean. A green it cannot forge is the point.
the wire: CI access, the witness gate toolchain, secret-scanning across repos and stores, access-review feeds, authority to fail a build with a written reason
Data and reporting agent× 2DECLARED
Generates every metric surface from the one source of truth — case outcomes, SLA performance, regulatory MI, the morning brief — computed from the index, never hand-typed, so no number can drift from the data.
the wire: Read access to CRM, ledger and logs; report generators wired to source data; the morning-brief pipeline; zero write access to the systems it reports on
the honest gap: The honest structural gap for the whole firm sits here: every tool is a sovereign single-file, device-local PWA. There is no multi-user sync, no server, no shared database, no backup/restore story, no SSO/identity for 100 staff, no device management, no helpdesk/ticketing. That architecture is the estate's deliberate strength for a sole practitioner and its unsolved problem for a 100-person firm — two handlers on two machines cannot see the same case, and the sell-shelf's double-booking fault showed exactly what concurrent users do to page-local state.
leadership 1 agent · 1 human
Orchestrator (chief-of-staff) agent× 1DECLARED
Runs the operating loop: maintains the one unsigned-door queue across all departments, ranks the managing director's first action each morning, tracks which preps are stale, and makes sure climbing the scoreboard never spams the key-holders.
the wire: Read access to every department's queue, the door-queue kernel, the brief generator, no keys of any kind by construction
Managing director (master key-holder)× 1💷 holds the money door
ALL FOUR LAWS converge here: final money doors, ultimate legal signatures, the taste and judgment calls nobody else can make, and the client-trust moments at the top of the ladder. Holds the master key the agent fleet provably cannot hold or fake.
what the rented stack costs — line by line
category
typical vendor
per user
seats
a year
Case management (claims/legal)
Leap or Proclaim (Access Legal)
£120/user/mo
70
£100,800/yr
CRM
Zoho CRM Professional (or HubSpot Starter class)
£15/user/mo
15
£2,700/yr
E-signature
DocuSign Standard (or Adobe Acrobat Sign class)
£15/user/mo
20
£3,600/yr
Document generation/automation
Woodpecker / Docmosis / HotDocs class
£10/user/mo
40
£4,800/yr
Accounting / practice finance
Xero Premium (or Sage Business Cloud)
£10/user/mo
5
£600/yr
HR & ATS
Breathe HR (+ entry ATS module)
£2/user/mo
100
£2,400/yr
Comms suite (email/office/Teams)
Microsoft 365 Business Standard
£10/user/mo
100
£12,000/yr
Storage / file share
SharePoint/OneDrive (in M365) + top-up
£2/user/mo
100
£2,400/yr
Per-seat AI assistant
ChatGPT Team (or Microsoft 365 Copilot)
£19/user/mo
40
£9,120/yr
Phone & SMS (VoIP/contact)
3CX / CircleLoop / RingCentral Core class
£8/user/mo
100
£9,600/yr
the rented total
£148,020/yr
prices are knowledge-dated estimates — re-cite every figure from the vendor page before any sales use.
the honest wire, whole: every agent seat above DECLARES what must be
plugged in before it runs — the data, the keys, the systems. Declared is the opposite of hidden:
this page never claims a seat works until its wire is in. The estate tools linked are live and
gate-proven; the gaps are printed verbatim from the research, because a company you can trust is
one that tells you where it is thin. Multi-user sync is the structural gap across the suite —
today's tools are device-local by design; a shared-queue layer is the first build of any real
engagement. Nothing on this page is for sale as-is: firm-fit is scoped person-to-person at
AI Native Solutions, builds from £300.
See also the regulated shelf ·
the owned stack.