Step 01
Your private operating map
Clients, matters, patients, jobs, invoices, and policies sit in a system your firm owns.
records · relationships · policy scope
Private AI control layer
Use the best AI available — without surrendering your client data or your firm's know-how.
Cartulary is a private AI control layer for firms that run on trust. Route work to the best model for each job, under your permissions, your policies, and a complete audit trail.
built for firms that must answer for every word · law · accounting · insurance · medical · PE-backed platforms
01
Your team is already using AI. The only question is whether it's under your control.
ENTRY 0001Claim 01
Unapproved AI use starts before a policy catches up.
Claim 02
Data retention and training terms vary by tool and contract.
Claim 03
Clients, carriers, boards, and regulators increasingly ask for the record.
02
How it works
ENTRY 0002Step 02
Your AI command center
Permissions, human review gates, reversible workflows, and a full audit log sit between your people and every model.
roles · approvals · reversibility
Step 03
The best model for every job
Route by cost, quality, speed, or privacy. Your firm is never locked into one AI vendor.
cost · quality · speed · privacy
03
Who it's for
ENTRY 0003PE
PE-backed platforms
Standardize AI across every company without giving away the playbook.
Law
Law firms
Give lawyers leverage without losing control of client confidences.
CPA
CPA firms
Add capacity while client data use stays under firm policy.
Insurance
Insurance agencies
Move submissions and renewals faster with reviewable human sign-off.
Medical
Dental and medical groups
Give each location AI leverage with patient-data handling controls.
04
Audit log mock
ENTRY 0004| Time | Actor | Record | Status |
|---|---|---|---|
| 2026-07-08 09:41 | ops-lead | policy renewal summary | Review |
| 2026-07-08 09:43 | partner-03 | client identifiers masked | Masked |
| 2026-07-08 09:46 | reviewer-01 | output released to workflow | Approved |
prompt · source record · model · reviewer · outcome
Security posture
Proof that can survive review.
Retention
Prompts and outputs are not retained or used to train vendor models where contractually supported.
Permissions
Role- and record-level permissions determine who can use each workflow and what data can leave.
Controls
SOC 2 certification is not claimed here. Control evidence is recorded so diligence can inspect the trail.
05
Every workflow makes your firm smarter — not your vendor's model.
ENTRY 0005Workflow
A person uses AI inside firm policy.
Captured decisions
Approvals, edits, and exceptions become part of the record.
Richer operating map
The next workflow starts with better firm-owned context.
Working session
Map one sensitive workflow before the next unapproved tool does.
Bring one workflow, one policy owner, and one skeptic. Leave with the operating map, review gates, and audit trail your firm would need before broader rollout.