Security and data
Answers for whoever has to sign it off.
Where your data lives, who can access it, how it's kept up to date, and what we can and can't see. Written for compliance officers, COLPs and practice managers.
Where your data lives
On a machine in your office. Nowhere else.
The AI models run on a machine on your premises. When someone asks a question, the prompt, the documents it draws on and the answer are all processed there. They are not sent to an outside AI service.
Your documents stay where they already are. The system reads from your shared drives and folders; it doesn't move them anywhere.
What we can and can't see
We look after the machine, not your matters.
What we can see
- Whether the machine is running and healthy
- Whether updates have been applied
- A support session you have approved, while it's open
What we can't see
- Your prompts and questions
- Your documents and files
- The answers and drafts it produces
- Your activity logs, which stay on site
Controls
How access, updates and paperwork are handled.
Access control
Only people you give an account to can use the system. You decide which folders each group can search, and you can remove access at any time.
Updates and monitoring
We apply security updates and model upgrades as part of the managed service, scheduled with you and recorded in a change log you can see.
Data processing agreement
Our security pack includes a data processing agreement template covering the limited support access we need.
Certifications
We only list certifications we actually hold. As we achieve them, they will appear here with their certificate details.
Questions
What compliance officers ask.
Does any of our data go to an AI provider?
No. The AI models run on the machine in your office. Prompts, documents and answers are processed there and are not sent to an outside AI service.
Who can use the system inside our firm?
Only people you give an account to. You decide who has access and which folders each group can search.
How is it kept up to date?
We apply security updates and model upgrades as part of the managed service, scheduled with you and recorded in a change log you can see.
Will you sign a data processing agreement?
Yes. Our security pack includes a data processing agreement template covering the limited support access we need.
Security pack
Everything your compliance review needs, in one pack.
A written security overview and a data processing agreement template, sent to your inbox.
Next step
See it working on your own documents.
Book a 30-minute call. We'll talk through how your team works, what's sensitive, and show you what private AI can do with the kind of work your firm does.