How Awdri handles your data

Awdri reads passports, right to work checks and DBS certificates, so you should know exactly what it does with them. This page says it plainly.

What Awdri does

• Reads the files you already keep, in the places you connect.
• Works out what each file is and the facts in it, like names and dates.
• Checks those facts against REC Audited, Home Office right to work and the agency conduct rules, and shows what's missing, with the source of each rule.
• Records who at your agency confirmed an item or marked it not applicable, and why.
• Builds an evidence pack you can share with your auditor.
• Checks the basics of your data protection and your Microsoft 365 security (two-step sign-in, admins, sign-in rules, managed laptops and phones, sign-ins from abroad), and tells you what to fix. For sign-ins, it keeps only the country, how many and who, never the sign-in records themselves.
• If an owner at your agency approves it, tidies candidate files into one folder per person.

What Awdri doesn't do

• It doesn't carry out right to work checks. Your agency still does every check the Home Office requires. Awdri looks at the record of the check you did.
• It doesn't verify identity. Awdri isn't an identity service provider and doesn't replace one.
• It doesn't give you a legal defence. A statutory excuse comes only from checks done correctly by you, or by a certified identity service provider.
• It doesn't certify or approve you. Only the REC, an auditor or a regulator can. A high readiness score isn't a pass.
• It isn't legal advice. Where a rule is unclear, ask a solicitor or the REC legal helpline.
• It only reads, unless you approve a tidy-up. Then it moves only the files an owner approved, within the same OneDrive or SharePoint library, records each move and can put any file back. It never deletes or overwrites a file, never changes what's in one, and never touches your email or CRM.
• It never sends anything for you. It doesn't contact your candidates or clients.

How Awdri uses AI

AI reads. Plain code judges. A person at your agency confirms anything the AI wasn't sure about.

• Each file is read by Anthropic's Claude, which returns a fixed set of fields. Anything unclear is marked for a person to confirm, never counted as ready on the AI's word.
• Whether you meet a rule is worked out by ordinary, tested code, so the same files always give the same answer.
• Your files aren't used to train AI models.
• Awdri keeps the facts it read and a fingerprint of each file, not a copy of the file.

Where your data goes

Your Microsoft 365 and your CRM stay yours. Awdri reads from them with your permission and stores no files there. We tell you at least 30 days before adding anyone to this list.

How it's kept safe

• Your browser never talks to the database. Every page is built on our server after checking who you are and which agency you belong to.
• Every agency's data is kept apart in every query, and that's tested automatically.
• Connections are encrypted, and we keep a log of who looked at what.

Paperwork

Ask UF Labs for our data processing agreement and full sub-processor list before you connect anything. Awdri is in testing with made-up data only, and won't read real agency files until that paperwork, an independent security test and Cyber Essentials for UF Labs are in place.