// who’s the model provider
Per-org LLM configuration: the office holds its own provider credentials, not a fixed third party we’ve quietly wired in.
The word is being diluted. Across AI vendors, "private" can mean anything from an isolated cloud tenant to a promise not to keep your prompts. A family office deserves a precise definition, which Super Chain gives here, and a straight answer to the only question that matters: where does our data go?
Private AI, for a family office, is deployment — not policy. The model, the documents, the embeddings and the audit trail run inside infrastructure the office controls, so the answer to "where does our data go?" is "nowhere."
Each rung is sold, somewhere, as "private AI." What separates them is not the marketing; it is where the documents physically go and who can reach them.
| Tier | Where the data sits | Who can access it | What to watch |
|---|---|---|---|
| tier i The public model | Staff paste questions — and sometimes documents — into a consumer chatbot. It is where most offices quietly are today. | The chatbot provider, which may retain and review inputs. | Inputs may be used to improve the model. For a family office, this tier is an incident waiting to be written up. |
| tier ii The private cloud tenant | Your own instance of the software, isolated from other customers, running in the vendor’s cloud. | The vendor, whose administrators run the machines. | Isolation is at the application layer only. "Private" here describes the tenancy, not the walls. |
| tier iii The zero-retention API | A cloud model reached under a contract that promises your prompts and documents are not stored and not trained on. | The model provider, bound by a contract not to store or train. | A policy, not architecture. Documents still leave your network. The protection is a sentence you trust, not a wall you can inspect. |
| tier iv On-premise | The model, the documents, the embeddings and the audit trail all run inside infrastructure the office controls — its own servers, or a private tenancy its IT team holds the keys to. | Only the office’s own people, verifiable at its own firewall. | You give up the convenience of someone else’s data centre. Someone must host the machine, and honesty requires saying so. |
Crain Currency’s advice to family offices (2026) is to walk any AI vendor through the chain of custody: who the model provider is, where it is hosted, the vendor’s relationship with that provider, and the protocols in place. Here is that walkthrough, answered by Super Chain.
// who’s the model provider
Per-org LLM configuration: the office holds its own provider credentials, not a fixed third party we’ve quietly wired in.
// where is it hosted
Your infrastructure — private cloud or on-premise. Not our data centre, not a shared multi-tenant cluster.
// what’s the vendor’s relationship with that provider
None to disclose. We don’t resell access to a model provider on your behalf — you configure and hold the credentials.
// what are the privacy and protection protocols
Role-based access control down to the document and skill level, per-org isolation, and an audit trail — OpenTelemetry traces and logging — for every action taken.
source: Crain Currency — family offices assess risks and rewards of AI investments, 2026 →
Privacy is the precondition, not the product. Once deployed, Super Chain answers only to the people you trust.
// 01
Fund statements, trust deeds, tax filings, handwritten valuations — read cover-to-cover and made answerable in plain words, with citations to the page.
// 02
Every cap call, lock-up, renewal, filing window and covenant in one calendar — surfaced before it lands, never after.
// 03
NAV, allocation, exposure by currency and jurisdiction; trusts, foundations, SPVs and holding companies — asked about in a sentence, answered from the ledger.
// 04
The house glossary, the standing rules, the way your office writes. Conversational access to what your office knows — and only your office.
The discreet or regulated office whose documents should never sit on machines someone else administers. An office with a lower sensitivity threshold or no in-house IT team may be better served by a cloud platform; the platform comparison sets out when.
Historically: weaker models, hand-tended infrastructure and an IT burden the office never asked for. Two things have changed, and one has not.
In July 2026, Squire Patton Boggs’ white paper “Managing Family Offices’ AI Risk” named confidentiality and discretion as the sector’s defining constraint on AI adoption. Citigroup’s own May 2026 report on AI in the family office frames the same problem as institutional rigor, not just risk-avoidance — the same conclusion, from the other side of the deal table. source: Family Wealth Report — Managing Family Offices’ AI Risk (SPB White Paper, Jul 17 2026) → source: Citigroup — “AI in the Family Office: Privacy, Efficiency and Institutional Rigor,” May 2026 →
Deployment, not policy. The office’s documents, portfolio data and conversations never leave infrastructure it controls, ideally its own network, so no third-party model provider receives, stores or trains on the family’s data.
Public model, private cloud tenant, zero-retention API, and on-premise. The first three still send your data to infrastructure someone else administers; only the fourth — running inside the office’s own network — makes the answer to “where does our data go?” actually “nowhere.”
For a discreet or regulated office, yes. Open-weight models now match the institutional quality bar, so privacy no longer costs capability, and an appliance-style deployment absorbs the IT burden. What you forgo is the convenience of someone else’s data centre — which offices at this tier treat as a feature.
Super Chain offers document intelligence over statements, deeds and agreements; obligation and covenant tracking; portfolio and entity queries across every vehicle; and conversational access to the office’s own knowledge — all running inside the office’s own network, answerable to the people it trusts.
Ask who the model provider is, where it is hosted, the vendor’s relationship with that provider, and the privacy protocols in place. Super Chain’s answers: the office holds its own provider credentials, hosting is the office’s own infrastructure, there is no undisclosed provider relationship, and access runs on per-document, per-skill RBAC with a full audit trail.
No. Super Chain runs inside the office’s own infrastructure, so its documents are never sent to Super Chain or to a model provider that could train on them. The office holds its own model-provider credentials, and every question and answer is recorded in an audit trail that the office’s own IT team can inspect.
A first conversation, in person where we can. We listen to how the house works before we ever speak about the platform.