Where your data goes,
written down before it goes live.

On a machine your firm owns, in your office.

The language model, the document index, search and transcription run on a Mac your firm buys as its own asset. I don't resell hardware, and I don't keep copies of your documents on my own devices or systems.

No client data goes to a third-party AI provider unless your firm approves that provider in writing first.

Healthcare practices: I don't access protected health information until we've both signed a business associate agreement.

Every outside connection is on a register you review.

A system in a real office still needs some outside connections. Each one goes on a written data-flow register, reviewed with your firm at handover and, with a support plan, every quarter. Nothing new goes live without your written approval. The usual entries:

What's in place on every install.

Encryption on the server

FileVault full-disk encryption. Your firm holds the recovery key; I keep no copy.

Encrypted backups

Nightly, one copy in your office and one off-site, both encrypted. Your firm holds the passwords.

Encryption in transit

HTTPS on every service staff use. Remote support runs over WireGuard through Tailscale.

No open ports

Nothing is opened on your router. Admin tools are reachable only over the support connection.

Model access

The language model listens only on the server itself. Desktop apps reach it through a keyed port.

Named accounts

Every admin has a named account, including mine. Your office manager approves each staff account.

My devices and accounts

Full-disk encryption on my devices and multi-factor authentication on every account that can reach your systems.

Restore tests

A restore from the off-site backup before handover. With a support plan, again every quarter, logged.

You hear promptly, and in writing.

If I discover actual or suspected unauthorized access to your data on the systems I manage, or on my own accounts or devices, I tell your firm without undue delay, and no later than five business days after discovering it, with what's known so far. If a rule your firm is under sets a shorter deadline, such as the 72 hours amended Regulation S-P gives financial firms' service providers, the agreement uses that deadline instead. You decide whether and how to notify your clients or regulators, and I help and keep the logs.

You keep the system, or it's wiped.

Your firm's duties stay your firm's.

Running AI on your own hardware doesn't by itself make a firm compliant with ABA Formal Opinion 512, the Georgia Rules of Professional Conduct, HIPAA or any other rule. Competence, supervision, client communication and fees remain the firm's calls. This page, the data-flow register and the vendor pack give you the facts to make them.