HOW IT WORKS

The intelligence stays close to the evidence.

A model-agnostic private retrieval platform built around access control, retrieval quality, provenance, and operational isolation.

← Back to overview
FIRM-CONTROLLED ENVIRONMENT
01Firm documentsDMS · file server · approved repositories
02Authorization + retrievalIdentity · matter ACL · hybrid search · rerank
03Local AISelected open-weight model · private inference
04Cited answerSource document · page · section · audit trail
EXTERNAL AI PROVIDERNO CLIENT CONTENT REQUIRED×
MODEL-AGNOSTIC

The generation model can change as stronger local models emerge. The firm's knowledge and governance layer remain.

PROVENANCE FIRST

Citation identifiers are generated by the application from stored document metadata—not invented by the model.

RETRIEVAL BEFORE GENERATION

The system narrows the evidence first, then asks the model to reason over the authorized passages that matter.

WHAT THE BOUNDARY LOOKS LIKEIllustrative interface. Documents and matter numbers are fictitious.
LEXDEPLOY · FIRM-CONTROLLED ENVIRONMENT
Authorized scope: Matter 2291-04

Summarise the settlement terms in the Kessler matter.

Ask about this matter…

Summarise the settlement terms in the Kessler matter.

NOT RETRIEVED

Kessler is matter 3140-02. It sits outside this user's authorized scope, so no document from it entered the candidate set and the model was never called.

  1. 01Identity resolvedUser, role and matter assignments read from the firm directory.
  2. 02Scope filter appliedCandidate set restricted to the matters this user is assigned to. Matter 3140-02 is excluded here, before any search runs.
  3. 03Retrieval executedSearch runs against the filtered set only. Zero passages returned.
  4. 04Generation skippedWith no authorized passages there is nothing to ground an answer on, so no prompt is constructed and no model runs.
The filter runs before search, not after generation. A document outside the user's scope cannot be summarised, paraphrased or inferred from, because it never enters the candidate set. Changes to a user's matter assignments take effect on their next query.
NEXT

Where the data can and cannot go.

The architecture above describes the query path. The security model describes who can reach the system, how it is maintained, and what leaves the building.

Read the security model →