Use AI without handing over the file.

The documents stay in the office. Every answer names its source.

In plain words

For lawyers, notaries and accountants: AI can speed up the searching, but a client file must not leave the building.

Provenize keeps the documents on your own computer and states which document and which page an answer came from — so you can check it before you rely on it.

Three problems from practice

What stops AI at the door of a regulated practice.

  1. The file leaves the buildingA cloud tool ingests the matter; you can no longer say where it sits.the corpus never leaves the machine
  2. The answer has no sourceA confident paragraph, no page reference. Unusable in a memo.nothing without a source
  3. You cannot prove what happenedA client asks which data the AI saw. Memory is not evidence.a chain a third party can recompute

What you get back

Artifacts, not assurances.

  • Every answer names its sourceBuiltdocument, page, match score
  • Signed export per personBuiltone bundle, digitally signed
  • Signed proof of erasureBuiltproof the key is destroyed
  • Recheck it yourself (verify())Builtshows whether anything was edited, inserted or deleted
  • Pause processingBuiltpause a subject without deleting
  • Retention-hold roleBuiltblocks erasure while retention applies
  • The register in one documentPlannedone signed document
  • Set of compliance documentsPlanneddrafted with counsel, not written yet
What the AI Act asks about logs

In plain words: the law wants you to be able to look back at who did what, and when. Provenize writes that down by itself, on your own computer.

  1. Art. 12 · automatic record-keepingHigh-risk systems must be able to record their own events, in a way you can trace afterwards.every lookup and save lands in the log
  2. Art. 19 · keeping the logsProviders keep the logs their system generates automatically.a file on your own disk, open format
  3. Art. 26(6) · deploying organisations tooOrganisations using such a system keep logs themselves as well.the same log covers both roles

Every line in the log carries the time, who did it and which file it came from. You decide where the log lives and how long you keep it, and you do not need a second system for it. This refers to the European AI Act (Regulation (EU) 2024/1689). These duties apply from 2 December 2027; they were scheduled for 2 August 2026 and were postponed. Why that is not a reason to wait. Is there a word here you do not know? See the glossary.

And the GDPR

Provenize runs on your own machines. No personal data reaches us, so for that local shape you do not need a data processing agreement with us. You remain the controller; we are not in the chain. That removes one processor from your register — your other obligations stay, and we do not claim otherwise.

Confidentiality and privilege

Designed to support compliance with the confidentiality obligations of regulated professions — not a substitute for your own judgement.

Not a legal product

  • No legal advice
  • No compliance certificate
  • No ‘compliant with the AI Act’
  • No hosting of client files
  • No cloud model at the core
Frequently asked questions

Can I use AI on client files?

That depends on where the data goes. If the file goes to a cloud service, you are effectively sharing it with a third party — which clashes with confidentiality. If the AI runs on your own computer, nothing leaves the office. Always put the choice to your data protection officer; this page is explanation, not legal advice.

What do I show a regulator who asks what the AI did?

A log in which every action is recorded: which document was read, when, and what an answer rests on. Provenize writes such a log automatically, and an outsider can verify that nothing in it was quietly changed.

Does really nothing leave my computer?

Documents and questions stay on your own machine; there is no cloud account and nothing is forwarded to us. What your browser remembers locally on this website (two preferences) is stated honestly in our privacy policy.

From the blog

Is your data really gone at an AI vendor? — the difference between confirming and proving, with seven questions for any vendor. And: can you trust an AI answer without a source?

Have your DPO test this.

Become a design partner