1. The Usual Argument and Its Limit
Privacy arguments for business AI follow a pattern. Is the data in the EU? Does GDPR apply? Does the provider comply with the AI Act? These are reasonable questions, and a serious buyer should ask them.
For a family office, a principal with a public profile, or an executive handling deals that have not been announced, they are also the minimum. Compliance describes what a company has agreed to do. It does not describe what is physically possible, and it depends on the company, and its successors, continuing to honour the agreement.
2. A Promise and a Property
There is a difference between a company that promises not to read your data and a machine that has no way to send it.
A regulation is a rule a company agrees to follow. A machine with no external connection is not following a rule: there is no path out of the room for the information to take. The first protects you for as long as the promise is kept. The second protects you in the cases where promises fail, whether through error, pressure, a change of ownership or a change of law.
"The company promises not to" versus "the machine cannot." Every argument in this memo is a case of that difference.
3. Four Ways a Cloud Provider Can End Up With What You Typed
Subpoenas and foreign jurisdiction are the familiar risks. They are not the only ones.
People at the provider. Providers commonly explain that human review of conversations helps improve their service. In practice that means staff, and sometimes contracted third parties, may read what a user typed, including anything sensitive, as part of quality or safety review. This is a stated part of how many providers describe their operation, not a hypothetical.
Surveillance, state or private. Data held on someone else's infrastructure is a target for foreign intelligence services, for corporate espionage and for anyone motivated enough to try. A machine that transmits nothing has nothing sitting anywhere to be targeted.
Reputational exposure. For a person with a public profile, a leaked private conversation, family matter or draft strategy is a story. The asymmetry is sharp. The provider faces a difficult news cycle, and the individual may face lasting damage.
Unfinished ideas. People use AI to think aloud, to develop an invention, a deal structure or a creative concept before it is ready to share. Each such session sent to a hosted service puts something valuable and unprotected on a server run by someone else, before the idea has any other protection.
4. What Local Hardware Changes
A SARION Appliance runs the model, the memory and the tools on hardware the client owns, with no external transmission required for it to work. The system can be physically isolated from external networks.
One practical consequence is easy to overlook. Because nothing is sent out, there is no need to sanitise what is typed. People using cloud AI learn to strip names, account numbers, passwords and specifics from prompts before sending them. On a locked-down local system that habit is unnecessary, and the owner can say plainly whatever they need to get a useful answer.
5. What This Does Not Do
It is worth being exact.
- It does not put the owner beyond lawful process. A court can order a person to produce what is in their possession. Having the data on your own premises changes who is asked and how, not whether the law applies. Nothing here is legal advice, and a family office should take counsel's view on its own position.
- It does not remove the need for ordinary security. Physical access, staff vetting, credentials and backup policy all still matter.
- It does not make a model right. Privacy and accuracy are separate properties.
6. Questions for the Family Office
- Which categories of material should never reach a third party, under any contract?
- For those categories, is protection based on a promise or on physical impossibility?
- Who at any provider you use can read prompts, under what circumstances, and for how long?
- What would a change of ownership or law at that provider do to your protection?
- Which draft or unannounced matter would be most damaging if it appeared in a headline?
7. Where the Line Falls
Not every task needs this level of protection. Public research and routine scheduling with outside parties can use ordinary services without harm. The discipline is in deciding in advance which material may never leave, and then giving it a system that is built not to need anyone's trust.
For a confidential discussion of how this applies to your office, contact us at volta.quest.