Dedicated database
Postgres per firm on the Protected SKU. Not a row in a pooled app pretending to be isolation.
Protected SKU · building
Private AI for firms that will not put client files in a shared pool.
The isolation bar is a dedicated data plane the firm owns. We take that bar on Google and Microsoft — as a dedicated database and private inference, not an ERP implementation. The practice layer still has to close: as-of WIP, realization, and fee caps belong in the product, not a next-cycle custom table. This is the SKU we are building. It is not certified, and it is not the free product.
Firm embeddings
pgvector on that database. Retrieval stays with the firm. We do not train a public model on your files.
Private inference
BYO-key or BYO-model. Suggest-and-confirm still applies. A human posts. We do not claim a foundation model we trained from scratch.
What we will not print as earned
| Claim | Today | Track |
|---|---|---|
| SOC 2 Type I / II | Not certified | Type I, then Type II |
| ISO 27001 | Not certified | After Type II |
| HIPAA | No BAA. Not claimed | Only if PHI is in scope |
| IRC §7216 | Consent skeleton exists | Required before tax data |
| Pooled owner AI | Launch-gated Anthropic / OpenAI | Not the Protected SKU |
Controls that already exist in the product — sessions, encrypted tokens, audit, restore drill — live on Security. Comparisons that mention isolation: /compare.
Questions
Is ficary SOC 2 Type II certified?
No. The compliance track is SOC 2 Type I, then Type II, then ISO 27001. None of those attestations are earned today. Do not treat this page as an audit report.
Is ficary HIPAA compliant?
No. Default CPA work is SOC 2 Type II plus FTC Safeguards plus IRC §7216 — when those are earned. HIPAA only matters if PHI is in scope. We do not offer a BAA today.
Does the free product run on a private model?
No. Suggest-and-confirm on the owner product uses launch-gated providers (Anthropic / OpenAI). That is not isolated inference. The Protected SKU is the isolation plane.
Did ficary train its own foundation model?
No. We will not claim a unique model trained from scratch. Private inference means your data stays on a dedicated plane, with a key or model you can bring.
Write us
If isolation is the reason you will not buy a copilot, say so.
We will not demo a certificate we have not earned. We will show the plane we are building.