One client, in every system that holds them.
Proxara works out which client a request concerns, so AI reads the right records and acts on the right target.
Hartwell Family Trust · engagementCLIENT_A17
ehartwell@ · threadCLIENT_A17
/Clients/Hartwell-2026/ · folderCLIENT_A17
Hartwell, E. · accountCLIENT_A17Four systems. Four different names. One client.
Built by a team with nearly a decade of cumulative security and compliance experience.
Nothing is read until Proxara knows who is asking.
Proxara asks each system as Dana, never as an administrator. A registered agent asks the same way, under its own revocable scope.
Agents
Connecting two records is its own permission.
Four modes, set by the firm, per kind of work.
Both records answer to one stand-in.
Which mode applies is firm policy. Proxara enforces it.Policy & Authority
The advisor sees her client. The model sees a stand-in.
The result comes back with real names. What left the firm never had them.
What should I cover with Eleanor Hartwell on Thursday?
Still open: the trust distribution note, the quarterly letter, and a relationship review from the trust team.
What should I cover with CLIENT_A17 on Thursday?
The name stayed in the firm.
The same stand-in holds for the whole task, and the reading behind the swap can run on a model inside the firm’s own infrastructure. Redaction
Infrastructure, not oversight.
Encrypted at rest.
Each identity is encrypted under its own key, so the store holds no usable plaintext on its own.
Granular crypto-shredding for right-to-deletion.
CCPA/CPRA · GDPR Art. 17Per-identity keys, so erasing one key erases one person without hunting copies through logs and backups.
Isolation by account.
Every identity belongs to one firm’s own account and carries its own key, so nothing is shared between firms.
Oversight that can be demonstrated.
Supervision rules ask a firm to show how automated work is overseen. Proxara records which person or agent asked, and the permissions the work ran under.
What was approved, run and confirmed
One private thread for every client.
Inside the firm, every version of a client belongs to one thread, across conversations, applications and agents. Each outside conversation gets a fresh stand-in, so one conversation cannot be joined to the next.
The firm’s own search still finds all three.
The same resolution decides where an action lands.
Proxara matches the stand-in back to the real client, folder and thread inside the firm, then checks the employee’s authority before anything changes.
ActionsEverything resolves to one person.
See one client resolved across the firm's systems.
A short call, then the same thread running on a practice tenant.
Talk to us