It's here...introducing the Enderley InfoHub in partnership with Infolegal
Anne Austin
Director
In our view, it’s the beating heart of a compliant, confident legal practice, and it’s even better than we promised! The wait is over, and we couldn’t be more excited!
For a while now we’ve hinted at a collaboration that we believed would genuinely change the way our clients manage compliance, teasing more than once, that something special was coming, and we are thrilled to tell you that it has exceeded even our own expectations.
The Enderley InfoHub, borne from our partnership with Infolegal, one of the most respected names in legal compliance content and technology, is now live. And the response from the clients who have already had a first look has been, frankly, phenomenal.
It’s difficult to capture the hub’s functionality in one standalone article, but we’ll try, because understanding why the Enderley InfoHub matters starts with understanding the problem it solves. If you could imagine your most perfect intranet, combined with over 40 compliance webinars tailored to people in different roles within your firm, then you’re not too far off the mark.
The ongoing compliance challenge
We know that running a law firm is genuinely demanding. The SRA is intensifying enforcement, AML obligations continue to tighten and cyber threats to law firms are growing at an alarming rate. And the Legal Ombudsman and regulators are raising the bar on everything from complaints handling to training evidencing.
We know it’s easy to become overwhelmed with the onerous nature of compliance, we hear common pain points time and time again. When you’re preparing for your Lexcel assessment and need to send current versions to the assessor, or confirming compliance before your CQS application or reaccreditation, we know it’s a lot of work to pull everything together.
Wouldn’t it be helpful to have everything you need, all the up-to-date information, plans, policies and procedures, risk assessments, records and registers in one place? And if you could give your auditor or Lexcel assessor a time limited user name and password to access it all? No moving documents between folders or drives, no emails, just all your compliance documents under one umbrella.
- Policies without version control – shared drives, email attachments, printed copies. Which version is live? Which are staff actually using?
- Training that can’t be evidenced – the SRA expects proof of understanding, not just completion. Many firms still rely on a spreadsheet and an annual tick-box, and even that isn’t always accurate. The SRA may also request sight of course content itself, not just the register, this is easy to do within the Enderley Infohub.
- Fragmented complaints tracking – registers spread across emails, files and memory make it impossible to spot systemic issues before they become enforcement matters.
- No visibility over cyber risk – law firms are increasingly targeted, yet many have no centralised log of software and hardware in use, especially in a bring-your-own-device environment.
- Key contacts not consolidated – COLP, COFA, MLRO, MLCO, data protection lead. When something goes wrong, that information needs to be instant to hand. In most firms, it isn’t.
- No records for gifts, hospitality or referral arrangements – easy to overlook until they become a problem. The Bribery Act 2010 and SRA conduct rules require proper records.
An introduction to Infolegal
Infolegal has been at the heart of legal compliance support since 2013. Their platform and knowledgebase covering everything from AML and data protection to SRA Standards and Regulations, accounts rules, cybersecurity and complaints governance is one of the most comprehensive and carefully maintained resources available to UK law firms. Their monthly Compliance Bulletins, factsheets and guidance notes are used and trusted by compliance professionals across the sector.
When the opportunity arose to collaborate to bring Infolegal’s regulatory content and platform capability together with Enderley’s consultancy expertise and client relationships, we leapt at it because we genuinely believe that our clients are going to love it.
Everything you get inside the Enderley InfoHub
So what exactly is in the Enderley InfoHub? Quite a lot actually, all of it purposeful, practical and designed around the real compliance challenges that law firms face every day.
Video introduction to the Enderley Infohub platform
Enderley Infohub - firm information and key role holders
Enderley Infohub - policies and guidance
Enderley Infohub - your practice precedents
1. Firm information and key role holders
The Firm Information section is the starting point for every new user, and one of the most immediately practical features of the platform. It consolidates everything staff need to know about the firm’s structure, its departments, and the key people they need to contact when something requires escalation.
2. Guidance and regulatory information
The information resources section of the InfoHub is where Enderley’s practical compliance expertise and Infolegal’s exceptional knowledgebase come together to brilliant effect. In our view, it is one of the most extensive and well-organised compliance libraries available to UK law firms.
Firms and their teams gain access to a comprehensive compliance resource hub, including clear, practitioner-focused factsheets covering key regulatory areas such as AML, conflicts of interest, cybersecurity, data protection, the SRA Transparency Rules and HMRC mandatory registration; step-by-step guidance notes supporting practical processes like handling Subject Access Requests, managing data breaches and understanding COLP and COFA responsibilities; monthly Compliance Bulletins tracking developments from the SRA, AML reform, FCA oversight proposals and data protection case law; plus our very own Compliance Lifeline all stored in one place.
All factsheets and guidance notes can be read on screen or downloaded in Word or PDF format.
3. Office Manual and Precedents
A neat home for all of the precedents that we have developed with you, tailored to your practice. This can include your Lexcel or CQS manual, individual plans, policies and procedures, your Firm Wide Risk Assessment, CMRA template, and all the forms you use to record and monitor compliance.
These are all working tools that will facilitate your internal audits and crucially provide the foundation that COLPs, COFAs and MLROs need when demonstrating to the SRA that appropriate systems and controls are in place.
4. Role-specific, verified, evidenced training
In 2026, the SRA’s expectations around training and continuing competence are unambiguous; completion of training is not enough, and firms are expected to demonstrate that staff have understood and can apply what they have been taught. For AML training in particular, the obligations under the Money Laundering Regulations 2017 are demanding, and enforcement action for firms that cannot produce proper records is a real and growing risk.
Critically, the SRA may also request sight of the course content itself – not just the training register. An inspector needs to be satisfied that what staff were taught was accurate, appropriate and relevant. That is a standard many firms are currently unprepared to meet.
The Enderley InfoHub training module addresses this head-on:
- Training courses are assigned to specific team members based on their role and level of seniority, so staff receive training that is genuinely important to their roles, not a one-size-fits-all course where elements are discounted by your staff because it’s not relevant to them.
- Every course is accompanied by a quiz, allowing your managers to verify comprehension and identify gaps that need addressing, before the regulator does. You can even reassign a course to a team member if needed!
- Individual training records are maintained for every team member, creating a complete, timestamped, auditable history of training undertaken, quiz performance and any outstanding requirements
- For COLPs and COFAs, the management overview transforms what was once a difficult evidential burden into a straightforward, documented process
You can watch a brief introduction to the course manager below:
5. A centralised, auditable complaints register
Come audit time, the ability to produce a clean, complete complaints register is critical. The Enderley InfoHub does just that via a centralised, accessible register that logs complaints, records the steps taken and outcomes achieved, and builds over time into a dependable management tool. You can watch the complaints register in action below:
6. Gifts and hospitality register
Despite it’s importance, this is often overlooked. The Bribery Act 2010 and SRA conduct rules require that gifts and hospitality received by staff are properly recorded. The Enderley InfoHub has a clean, centralised register that builds an audit trail and demonstrates the firm’s commitment to ethical practice.
7. Referrals of new business log
Referral arrangements require transparency. The SRA’s rules are clear that any benefit received in connection with the referral of business must be disclosed to clients, and that arrangements must not compromise independence or create conflict. The Enderley InfoHub’s referrals log is simple and straightforward to maintain.
8. IT Log and personal equipment register (BYOD)
The ability to know exactly what hardware and software is in use across the practice including personal devices used for work is a basic requirement of responsible cyber risk management.
The Enderley InfoHub’s IT log and BYOD (Bring Your Own Device to Work) register gives firms the visibility they need, knowledge of what is connected to your systems and the ability to respond to incidents with that information already at hand. It also neatly demonstrates to cyber insurers – who are increasingly demanding in their requirements – that appropriate controls are in place.
9. All firm records in one place
Beyond the specific modules above, the Firm Records section provides a central home for the full suite of registers law firms are required to maintain: undertakings registers, regulatory breach records, data protection forms, Subject Access Request records and Legitimate Interest Assessments. The Data Protection section covers UK GDPR obligations, breach management and the new requirements introduced by the Data Use and Access Act 2025 – including the new statutory right for individuals to raise data protection complaints directly with the firm.
One source of truth
Having all of this information in one place, accessible from any device, maintained and updated by compliance experts, is genuinely transformative.
Add to that 40+ up-to-date and role-specific compliance webinars and training records in the same place, and we think you’ve got something special.
When everything lives in different places, updated by different people, accessed through different systems, with no single version anyone can be sure is current, the risk of inconsistency, confusion and failure multiplies.
The Enderley InfoHub eliminates that exposure. One login, role-appropriate access so staff see only what is relevant to them. Content can be maintained and updated by Enderley and Infolegal at your request so that guidance evolves alongside the regulations it covers. And full support available through the platform’s built-in ticketing system, with a response commitment of two working days.
For firms with staff operating across hybrid working environments the ability to access the same, current, authoritative information from any device is so important. Firms experiencing growth or staff turnover will have an operational advantage in having a single onboarding point for new team members.
Are you ready to see it in action?
No matter how detailed we’ve tried to be here, seeing the hub in action first-hand will be transformative; we’ve already seen the reaction when clients first log in to the Enderley InfoHub and watched the moment it clicked into place, and we would love for you to experience it too.
The Enderley InfoHub is available now. We are inviting firms to get in touch to arrange their own demo just as our early adopter clients did and see for themselves what the Enderley and Infolegal collaboration has made possible.
If you’re still in doubt
Here’s a few questions to ask yourself:
- Can you evidence, right now, that every team member required to complete AML training has done so, and understood it?
- If a fee earner needed to find your current AML policy at 6pm on a Friday, could they find the right version within two minutes?
- Could you produce a complete complaints register for the past 12 months immediately (and trust its accuracy?)
- Do you have a central record of all gifts and hospitality received by staff this year?
- Can you tell us, instantly, which devices are connected to your firm’s systems?
- When something goes wrong, does every member of your team know exactly who to call?
- Is the training you provide to your team role-specific, and does it cover all areas of compliance?