Confidentiality
What this design does and does not solve
The work is processed by commercial AI on every run. Where your library is stored decides where your files rest; it does not stop the work being sent out for processing.
What that solves, and what it leaves. Keeping the library on your own
hardware means the standing collection of everything your firm has uploaded is under your
control, your encryption and your retention schedule. It does not mean matter text
stays in the building: the excerpts a task needs still go out for AI processing on every run.
"Our library is on our own server" and "nothing we work on leaves the building" are
different sentences, and only the first is a design property here. A firm that
needs the second is describing a different product, and we would rather say so than let the
distinction go unnoticed until someone's IT lead finds it.
What a firm would have to assess
Whether output like this is protected work product is a legal conclusion about your matter.
This page does not make it, and a vendor asserting it would be telling you
something it is not in a position to know. It depends on purpose and circumstances, and the
third-party-transit question is squarely inside that analysis under every arrangement offered
here. It is your call, and it should be made before anything goes in.
The professional duties in play (confidentiality, competence with the tools you use,
supervision of work done with them, and candour about the authorities in a filing) are
described here rather than cited. Quoting a rule number or a bar opinion from memory on a
page about fabricated citations would be an unusually stupid way to prove the point.
Status of every control that would matter
- in use Your firm's library feeds its tasks today, in the dedicated hosted arrangement. Office and workstation placement are not offered yet.
- decided Matter content is data, not instructions. It reaches the AI's input and the rendered file only, never tool execution, never automation. Retrieved opinions and client documents are treated the same way: a document pulled from a corpus is hostile input too.
- not yet Setting out the AI processing and its data terms in writing before a firm sends anything.
- in place Permissions decide what every search and every run may draw on: firm-wide sharing, ethical walls and matter membership.
- by design Conflicts handling. Three different things live under that word (firm-level conflicts, per-matter access control, and whether one matter's material can surface in another's retrieval) and only the second and third are things software can do.
- by design Encryption at rest with a key per matter and per document kept outside the backed-up database, the audit record, and firm-controlled deletion.
- on the table The diligence questions a firm would send any vendor: supported hardware for the library, update and patching process, what an installer touches, breach notification for defects, support access, and the retention terms for the AI processing. These are answered per firm, in writing, and worth holding to the same standard as any other vendor's.
The memory feature argues the other way here
The firm's memory is in use: every finished run is filed into it, and research and analysis recall permitted past work. That makes the permission line matter more, not less.
On the main pitch
Cross-project memory is the moat: a corpus built out of your own work, which a
competitor can't buy.
In a firm
Cross-matter memory is the moat here too — a firm's precedent files always
have been — but a retrieval layer that lets one matter's material surface in a run
it should not is a confidentiality and conflicts problem, and keeping the machine in the
building does nothing to fix it, because the leak is between people and matters rather
than out of the door.
HiCourt keeps that line in the software: past work is recalled only where the person asking may see it, labelled with where it came from and whether it was reviewed, and it never replaces a fresh check of the law.
This page, and where a reply would go
This page is static: no server, no cookies, no analytics, no external requests. The form
below opens your own mail client and sends nothing on its own.
It composes to a personal mailbox at a consumer email provider, because
this static page has no server of its own behind it. That is a fine channel for
"here's what my firm would need" and an unacceptable one for anything about a
client, a matter, or a party. Please don't put confidential facts in it.