Change the AI.
Nothing else changes.

The firm picks the assistant. What protects the client stays in the firm’s own account.

The systems Proxara connects

Any of them. What holds them is not one of them.

Which AI can a firm use?

Any of these. Anything else that speaks MCP. And agents the firm builds itself.

Claude

ChatGPT

Microsoft 365 Copilot

Gemini

Cursor

Perplexity

DeepSeek

Kimi K3

Qwen

Mistral

Llama

Ollama

Does this work on Copilot too?

Yes. The client is chosen in the firm’s own window, never typed into Copilot.

Ask for the work. No client named.

Pick the client. Add the documents.

It proposes, against names it cannot read.

A person approves. The answer stays here.

In Copilot

In the firm’s own window

In CopilotAsk for the work. No client named.
In the firm’s own windowPick the client. Add the documents.
In CopilotIt proposes, against names it cannot read.
In the firm’s own windowA person approves. The answer stays here.

Microsoft keeps what people type into Copilot. That is why the split falls where it does.

Could one consent in the engagement letter cover it?

Sometimes, and it is a real path. Consent is per purpose and prospective, so it does not travel across a whole book, and every new kind of work becomes another round of client paperwork.

Does Microsoft not process inside the firm’s own tenant?

On the most favourable reading, the firm is still relying on a vendor relationship and the promises written into it. And that vendor sees only its own data, while the value here is the join across all of them.

Why not Karbon, or another practice platform?

Those platforms are built to put their own product at the centre of the workflow, not to run a private control point inside each firm’s own cloud. Their AI stays tied to their platform.

And the systems underneath.

Swap the practice management system, and the work the firm defined stays where it is.

Karbon

Microsoft 365

SharePoint

Outlook

Salesforce

Thomson Reuters

Wolters Kluwer

Drake

Lacerte

Holistiplan

Everything Proxara connects

One column is a preference.The other is the firm’s.

Switching the assistant touches the left column only.

Nothing on the right is ours to hold.

changesstays

The assistantThe purpose bound to the work

Where it is boughtThe stand-ins, and who can undo them

The words it picksWho may approve what it sends

The right column is written once.

A client name never reaches it.

Names and figures are swapped inside the firm’s own account.The model receives neither, and the real values return only on the employee’s screen.

Step 01

Identify

SCANNING

Draft an email to Margaret Liu about her portfolio. Mention our fund is guaranteed to outperform the S&P this year.

LOGGED TO AUDIT TRAIL

Recognized by meaning, inside the firm's own environment.

Step 02

Redact

PIIMargaret Liu

[CLIENT_1]

REGguaranteed to outperform

Held for confirm · on the record

Identifiers stripped before anything reaches the model.

Step 03

Restore

Here's a draft for [CLIENT_1]:

"Dear [CLIENT_1], ahead of our quarterly

review, an update on your portfolio…"

PII RESTORED FROM VAULT

Rehydrated on return, nothing changed for the person using it.

One policy. Whatever it runs on.

What may be seen, what may be joined, what may be said and what may be done. Written by the firm, enforced the same on every model, and mapped to ISO 42001, NIST, SEC and FINRA.

319 controls · 37 frameworks

Built by a team from:

Experience across enterprise security, AI governance, cloud, and compliance-heavy startups.Experience across enterprise security, governance, and compliance-heavy startups.

See Team

Bring the AI the firm already picked.

Tell us which assistant the firm wants to use, and which systems it should reach.

Talk to us