1. You get your own private instance.
A dedicated setup for your firm. Not shared with the broker down the road. Not running on someone else's account. Encrypted, and it's yours.
2. You upload your documents.
Client files, PDFs, text-based documents. They're read once, indexed into your own database on your own instance. (Scanned PDFs? Not yet. We'll tell you that upfront.)
3. You ask a question. It answers from your documents.
Retrieval first, then the answer. If the answer isn't in your files, it tells you. It doesn't guess. It doesn't invent a citation. It says "not in your documents." That's the whole point.
4. Everything is logged on your instance.
The question. The excerpts it pulled. The answer it gave. Your log, on your server. Not for us — for you.
Why this matters
That log doesn't write your privacy policy for you. You still write it. But it gives you the facts to write it accurately. You can describe the data flow because you can see it. With a shared black-box tool, you can't. That's the difference.
What it's not
- It's not ChatGPT with a privacy sticker. It answers from your documents, not the internet.
- It's not a compliance certificate. It supports your disclosure. You still have to write it.
- It's not a replacement for your aggregator tools. It's a different job.