Trust Center · Data & AI

Data handling and AI boundaries

Deterministic financial state stays separate from assistive AI. Extraction or AI tools may prepare proposals for review, but they do not create reviewer decisions, calculate LIBR, finalize Value Lineage, or decide legal ownership, credibility, or admissibility.

Last updated: 13 July 2026

StagePossible processingRequired boundary
UploadFile validation, metadata, size and type checks, storage, and SHA-256 reference creationThe user must be authorized to process the record.
Text extractionNative PDF text extraction or a local OCR runtimeExtraction may be incomplete and does not create an authoritative ledger.
External extractionDocument-processing provider only when explicitly enabled and when configured in your deploymentThe customer or deployment administrator must approve the provider for the data class.
Candidate reviewSuggested dates, descriptions, amounts, account hints, and confidence indicatorsHuman review before import, target-account confirmation, and reconciliation are required.
Transfer proposalsDeterministic possible relationships between supported ledger rowsA proposal does not become a ReviewedTransfer without an explicit reviewer decision.
Money FlowRead-only projection of reviewed account and transfer relationshipsThe projection does not determine source-value lineage, ownership, concealment, or purpose.
AI assistanceDrafting, summarization, classification, or review suggestionsAI output is editable assistance, not a factual or professional conclusion.
LIBR calculationDeterministic ledger replay using selected records, source transaction, strategy, and assumptionsGenerative AI does not calculate the traceable balance.
Value LineageExplicit reviewer allocations conserved inside one finalized tracing runThe backend recalculates conservation; no destination TraceLot or cross-account propagation is created.
Workpaper exportStructured PDF, source references, calculation snapshot, and final file hashA qualified reviewer must verify methodology, data, jurisdiction, and intended use.

What Exit Protocol may store

  • Account, case, party, role, and configuration data
  • Uploaded evidence, extracted text, candidate rows, and review status
  • Transactions, source links, coverage, transfer decisions, tracing runs, calculation state, and workpapers
  • Hashes, access events, processing errors, integration identifiers, and support records

What AI does not decide

  • Who legally owns property
  • Whether a person is truthful, fraudulent, abusive, or credible
  • Whether evidence is complete, authentic, privileged, or admissible
  • Which tracing method or jurisdictional rule a professional should use
  • Whether an output should be filed, disclosed, relied upon, or presented

Model-training policy

Exit Protocol does not use customer case content to train its own general-purpose models. Synthetic data, public information, or de-identified evaluation data may be used for testing and product quality.

When an external AI provider is enabled, its handling of submitted content is governed by the configured account, provider terms, retention controls, and regional settings.

User controls

  • Use deployments with external AI or extraction disabled.
  • Select the matter and document used in a connected workflow.
  • Review, edit, reject, or approve candidate data.
  • Disconnect integrations and revoke access.
  • Request access, correction, export, or deletion subject to applicable limits.
No silent workspace sweepConnected-service processing is intended to be user-triggered and limited to user-selected matters and documents. Marketing or interface language should not imply unrestricted background ingestion.

Human review is a product requirement, not a disclaimer shortcut.

Reviewers should confirm the target account, statement coverage, source relationships, transfer decisions, reconciliation, calculation or tracing methodology, jurisdiction, limitations, and any applicable final file hash. Recorded and finalized state is structured review material, not a substitute for professional responsibility.

This page describes product boundaries and is not legal advice, accounting advice, an expert opinion, or a security certification.