Start with custody, then access. Decide which documents may reach an AI tool, run the tool on infrastructure the office controls, limit each document to the roles cleared to see it, and keep an audit log the office holds. A written rule for staff covers the tools nobody approved.
Most exposure comes from a document placed in a tool nobody approved. A statement goes into a free assistant, or a deed into a browser extension. Each hands the family’s affairs to an unreviewed service.
In the 2026 RBC and Campden Wealth North America Family Office Report, published on 1 October 2026, 59 percent of 155 offices named cybersecurity and data breaches their top near-term operational concern. A year earlier it was 16 percent. (Source: RBC Wealth Management, October 2026.)
The order matters. Custody and scope decide most of the risk before any permission is set.
The office decides which documents go in and who may see them. That decision sits with the principal or the COO, because it concerns the family’s information, with IT carrying out the work.
A vendor can provide the deployment, the permission model and the log. The staff rule and the review stay with the office. For the questions staff ask most, read is ChatGPT safe for family office data.
Super Chain runs on the office’s own private cloud or servers, isolated from every other office. Access is set by role down to the single document, and each query is recorded in an audit log the office holds.
Answers come from the office’s own documents, each cited to its page, and the office chooses the model the platform uses. The trust and security page sets out the architecture. The cyber-safe AI roadmap sets out the order of decisions.
This guide is for single and multi-family offices, and investment offices, whose staff use AI already or are about to, and whose documents carry family, tax and counterparty detail.
It is not a full cyber programme. Email security, device management and penetration testing sit outside it, and an office needs those whether or not it uses AI.
Super Chain is accountable for the platform and its configuration. The office remains accountable for which documents go in, who may see them, and the terms of the model provider it chooses.
Super Chain is built by Super Cat Technology. The same team built a fully on-premise retrieval system for a Big 4 firm, where every answer returns with its source paragraph.
“Most of the protection is decided before any software arrives. Which documents go in, who may see each one, and who signs off the model provider’s terms? My team builds the platform so those decisions become settings the office can check. Access is set down to the single document, and the office holds the audit log.”
Start with custody, then access. As of October 2026, Super Chain’s approach is to run the AI on infrastructure the family office controls, limit each document to the people and roles cleared to see it, and keep an audit log the office holds. Add a written rule on which AI tools staff may use, and review every vendor’s data terms.
A blanket ban tends to push use onto personal phones, where the office cannot see it. As of October 2026, Super Chain’s view is that a written rule works better. Name the approved tools and list the documents that may never go into a hosted tool. Then give staff a sanctioned place for work that needs the family’s documents.
Four questions cover most of it. Where does the software run, and who operates that infrastructure? Which model provider does it call, and on what terms? Can access be set per document? Is there an audit log the office holds? As of October 2026, Super Chain suggests asking for each answer in writing, dated, and filing it with the contract.
It moves custody to the office; it does not finish the job. As of October 2026, Super Chain’s view is that on-premise or private-cloud deployment needs document-level permissions and an audit log beside it. Without those, anyone with access to the system can ask about anything, and nobody can show who asked.
We load one vehicle’s documents onto your infrastructure. Your team asks real questions of them for 30 days, and each answer comes back cited to the page it came from.
Choose a time below to scope the pilot with us. If you would rather see the platform first, book a private demonstration.