What runs where, and who holds the keys.
The page a compliance person, a managing partner or an auditor gets forwarded.
Local, always
Anything with a patient, a client file, a financial record or a cost book in it. Transcription, intake, records search, drafting over your own data, internal chat.
Frontier model, only under a written rule
Marketing copy, public content, code with no secrets, analysis on data with the names stripped out. On your key, on your account.
Who owns what
The box, the keys, the accounts, the models, the workflows. All yours. In writing.
What I do and do not touch
I do not keep your data on my systems. Ever. When I maintain the box I log what I accessed.
The security floor on every install
- Multi factor
- Least privilege
- Credentials in your name
- A secrets vault
- Audit logs
- Separate development and production credentials
- No keys in shared docs or workflow screenshots
Data minimisation
I do not push your whole inbox into a model when one field will do.
Human review
One named person on your staff owns final review of anything the AI writes that touches money, patients, legal filings, hiring or a customer.
If you are in California
Automated decision making rules, bot disclosure for any consumer facing voice or chat, consent and opt out on automated texts. We check whether the CCPA thresholds reach you during the audit.
If your auditor wants this as a PDF with your name on it, that is the architecture statement, and it comes with the install as a contract exhibit.