URLs below identify the sources used in this document and its accompanying FAQs. Official guidance supports the legal and security checks; vendor pages support only the attributed product and contractual statements.
- ICO — AI accountability and governance: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/what-are-the-accountability-and-governance-implications-of-ai
- GOV.UK — Guidance on the Impact Evaluation of AI Interventions: https://www.gov.uk/government/publications/the-magenta-book/guidance-on-the-impact-evaluation-of-ai-interventions-html
- ServiceM8 — Automation overview: https://support.servicem8.com/help-center/servicem8-add-ons/automation/automation-overview
- Commusoft — UK customer communication and service reminders: https://www.commusoft.com/en-gb/field-service-crm/
- Spruce — Heat-pump enquiry-to-handover software: https://www.spruce.eco/
- Airco — Service Delivery Co-ordinator role: https://airco.co.uk/careers/service-delivery-co-ordinator-copy/
- Joblogic — API terms, updated 22 September 2026: https://www.joblogic.com/api-terms/
- HSE — Landlords: a guide to gas-safety duties, including emergency arrangements: https://www.hse.gov.uk/pubns/indg285.pdf
- ICO — When a DPIA is required: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/data-protection-impact-assessments-dpias/when-do-we-need-to-do-a-dpia/
- ICO — Controller–processor contract requirements: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/contracts-and-liabilities-between-controllers-and-processors-multi/what-needs-to-be-included-in-the-contract/
- ICO — Lawfulness in AI: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-lawfulness-in-ai/
- ICO — Transparency in AI: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-transparency-in-ai/
- ICO — Identifying direct marketing and service messages: https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/direct-marketing-guidance/identify-direct-marketing/
- ICO — Marketing and data protection for small organisations: https://ico.org.uk/for-organisations/advice-for-small-organisations/direct-marketing-and-data-protection/marketing-and-data-protection-in-detail/
- NCSC — Prompt injection is not SQL injection: https://www.ncsc.gov.uk/blog-post/prompt-injection-is-not-sql-injection
- ServiceM8 — Testing and going live with Phone Agent: https://support.servicem8.com/help-center/servicem8-add-ons/servicem8-phone-agent/how-to-test-and-go-live-with-the-servicem8-phone-agent
- ICO — Security and data minimisation in AI: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-should-we-assess-security-and-data-minimisation-in-ai/
- ICO — International transfers: quick-reference FAQs: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/quick-reference-faqs/
- ServiceM8 — Introducing Phone Agent: https://support.servicem8.com/help-center/servicem8-add-ons/servicem8-phone-agent/introducing-the-servicem8-phone-agent
PUT THE RESEARCH TO WORK