AI installed inside the firm’s own network or private tenancy. The models, the data and the audit trail never leave the office, so portfolio, entity and document intelligence runs without sending client data to a third-party cloud.
The real question isn’t architecture — it’s a decision: can we keep using cloud AI, or does our situation force it in-house? Cloud is genuinely fine — until one of four things becomes true.
Three ways to run AI over a wealth operation’s data, compared on the axes that actually decide it. Cloud earns its place for low-sensitivity, scale-on-demand work. The table shows where that stops being true.
| decision axis | Public cloud API | Private cloud tenant | On-premise (in-network) |
|---|---|---|---|
| Data residency | Vendor’s regions | Vendor’s tenancy | Your network — never leaves |
| Third-party vendor exposure | High — data transits the provider | Reduced — still vendor infrastructure | None — no third party in the path |
| Audit trail | Vendor attestation | Shared logs, vendor-held | Your own logs, your side of the wall |
| Cost model | Metered per query / per seat | Metered plus reserved capacity | Predictable fixed-infrastructure cost — no per-query metering † |
| Model quality | Frontier models | Frontier models | Open-weight models now match the bar |
| IT control | Vendor-controlled | Shared control | Your team holds network, keys, change windows |
† Cloud AI cost models are still being priced live in the market: “the cost gets sorted out later” is now a documented vendor-side vulnerability, not a hypothetical. source: Modus — “Addepar’s AI Is Already a Hit. The Cost Will Get Sorted Out Later.” (Jun 8 2026) →
Often. For general research, drafting, market summaries and any task that touches no identifiable client data, a public cloud API is the right and lower-cost answer. Cloud stops being enough at one precise line: the moment client identities, holdings, entities or documents enter the prompt, or a regulator expects you to control where that data goes. On-premise is the answer to that second case, not the first.
A live example of that trade-off: WealthAi launched a new cloud AI layer for advisers this month, with no rip-and-replace and a reported 60% cut in routine admin time in beta (FinTech Global, September 2026). It is a good answer to “how soon can we adopt.” It is not an answer to “where does the client record go once we do”: on a cloud platform, that is the vendor’s infrastructure, not yours. source: FinTech Global — WealthAi launches AI platform for independent advisers (Sep 3 2026) →
Four things turned true in 2026, and any one of them moves in-network deployment from a preference to a requirement for a regulated or discreet office. Each is a dated, third-party development, not Super Chain’s claim.
// trigger 01 · sec
The SEC’s 2026 examination priorities name AI use and supervision as a standalone review area for RIAs and broker-dealers. AI oversight is no longer incidental — it is something examiners now arrive expecting to inspect.
// trigger 02 · reg s-p
The amended safeguards rule takes effect for smaller entities on June 3, 2026, requiring documented controls over how AI tools and vendors handle client data — including a written incident-response program for a data breach.
// trigger 03 · sfc
The SFC treats AI-generated investment recommendations and research as high-risk use, imposing stricter model-validation duties — while the EU AI Act’s extraterritorial reach has been flagged to Hong Kong institutions.
// trigger 04 · confidentiality
Squire Patton Boggs’ July 2026 white paper, “Managing Family Offices’ AI Risk”, names confidentiality and discretion as the sector’s defining AI constraint — the plain case for keeping the model inside the office’s own network.
It is who can be talked into granting access. In August 2026 a coordinated AI-vishing wave targeted Point72, Citadel, Millennium and Two Sigma: callers with cloned executive voices pressed help desks for MFA resets and new-device enrollment (Fortune, August 2026). Nothing was hacked. Someone was called. FINRA activated its Financial Intelligence Fusion Center in response.
On-premise deployment doesn’t make a help desk immune to a convincing phone call. What it changes is what that call can reach: minimal standing access, internal logging of every request, and no vendor-side account a caller can talk their way into resetting.
source: InvestmentNews — Point72, Citadel among hedge funds hit by AI vishing attacks →source: Tech Times — FINRA Fusion Center activated (Aug 6 2026) →source: Fortune — Major hedge funds targeted in wave of attempted cyberattacks (Aug 6 2026) →
Open-weight models now match the institutional quality bar, so keeping the model inside your walls no longer costs you capability. “Staying private means a weaker model” was a real constraint once; today it is an excuse, not a trade.
Any wealth manager, family office or investment office, once client identities, holdings or documents go into the prompt, or once one of the four 2026 triggers above applies. A firm using AI only for research and drafting does not.
Everything below runs on the office’s own servers or private tenancy: not a feature list hosted elsewhere, but Super Chain itself, living where the documents live. It carries a predictable fixed-infrastructure cost with no per-query cloud metering or per-seat cost creep.
// 01
Fund statements, trust deeds, facility agreements and handwritten valuations — read by vision models and made answerable with citations to the page.
// 02
Cap calls, lock-ups, renewals, filing windows and covenants posted to one calendar, surfaced before they land.
// 03
NAV, allocation, liquidity and FX exposure across every vehicle — asked in a sentence, answered from the ledger.
// 04
Principals, partners, advisors, operators and counterparties each see only what is theirs — enforced in the platform, in the words your office already uses.
// 05
Every glance, edit and question kept in a record that belongs to the office — readable, exportable, yours.
Cloud AI is fine for low-sensitivity, scale-on-demand work — general research, drafting and tasks that touch no identifiable client data. It stops being enough the moment client identities, holdings or documents enter the prompt, or a regulator expects you to control where that data goes.
When any of four 2026 triggers applies: the SEC’s new AI exam category, Regulation S-P’s June 2026 vendor-oversight duties, the SFC’s “high-risk” classification of AI investment advice, or a confidentiality standard like the one Squire Patton Boggs codified for family offices. Each makes third-party data transit a liability.
No. Open-weight models now match the institutional quality bar, so keeping the model in-network no longer costs you capability. “Staying private means a weaker model” is an outdated trade-off, not a current one. The real costs of on-premise are elsewhere: a deployment measured in weeks, and an internal team that holds the keys.
It delivers document intelligence, obligation and covenant tracking, portfolio and entity queries, org-scoped access control and a full audit trail, all running inside the office’s own network or private tenancy. The cost is a predictable fixed-infrastructure cost, with no per-query cloud metering or per-seat cost creep.
Yes. Super Chain runs on the office’s own servers, or in a private tenancy its IT team holds the keys to, for family offices, investment offices and broker agencies. It answers questions over the office’s own documents with citations, tracks obligations and key dates, and keeps an audit log of every request inside the office.
Not by itself — no architecture stops a convincing phone call. What it changes is the blast radius: minimal standing access, no vendor-side account to reset, and a full internal log of every request, inside the office’s own network rather than a vendor’s help desk.
A first conversation, in person where we can. We listen to how the house works before we ever speak about the platform.