Deployment & control
Run it where the work requires.
Sensitivity varies by matter and by client. The architecture is the same whether a workload uses a frontier model through an API your organization has vetted, a private cloud deployment, or open-weight models on hardware you own.
Frontier APIunder your organization’s agreements
Private cloudyour tenancy, your keys
Hardware you ownopen-weight models, on premises
More sensitive
Permission-aware retrieval
Retrieval can be scoped to what the requesting person is already allowed to see.
Provenance
Outputs trace to the documents and pages they relied on.
Run records
Each workflow run can record its inputs, stages, checks, and reviewer.
Human review
Required before anything consequential leaves the system.
No lock-in
Portable across model vendors. The workflows and documentation are yours.
What we won’t claim No architecture resolves your confidentiality, privilege, or regulatory obligations for you. Those judgments stay with your lawyers. We make the tradeoffs explicit and design around the obligations you already carry.