Every public AI service is a third party. A family office does not have third parties.
The tools your team would most like to use all work the same way: the text is uploaded to someone else's computer, processed there, and the answer sent back. For a marketing brief that is fine. For a term sheet, a trust deed, a principal's correspondence or a consolidated statement of the family's holdings, it raises questions nobody in the office wants to answer: who else can read this, where is it stored, and under which country's law can it be demanded?
The answer today is that the team either works without the tools, or uses them quietly on personal accounts. Neither is a policy a principal would sign off.
Discretion is not a feature the office buys. It is the office.
Why every conversation with a family office starts with where the machine lives.A private AI system inside the office, owned by the office.
The unit is a compact, quiet server built around professional NVIDIA processors. It runs today's leading open AI models entirely on its own, with no connection to any outside service required. Your document store, mailboxes and portfolio systems talk to it across the internal network, the same way they talk to your file server.
Because the office owns the hardware and holds the keys, there is no processor to audit, no cross-border transfer to justify and no vendor who could be compelled to disclose. The material stays exactly where it is today: with the family.
Deal flow and investment memoranda
Read every memorandum, pitch and information pack that arrives, score it against the family's mandate, and surface the three worth a partner's time.
Due diligence on direct investments
Work through a data room in an afternoon, answer the checklist, flag the inconsistencies, and cite the page for every finding.
Consolidated reporting
Reconcile statements from several custodians, banks and managers into one view, in the family's own format, without a reporting platform seeing the numbers.
Structures, trusts and agreements
Trust deeds, shareholder agreements, side letters and fund documents, searchable and comparable across decades of paper, with every answer traced to its source.
The principal's archive
Ask questions of years of correspondence, minutes and notes in plain language, and get an answer with the letter it came from. Nothing indexed leaves the unit.
Counterparty and KYC review
Screen new counterparties, advisers and co-investors against the documents they supply and the office's own records, before an introduction becomes a relationship.
Nothing crosses the perimeter. That is the whole design.
The unit is installed inside the office's network and can operate with its internet connection switched off entirely. Staff and trusted advisers use it from their existing desktops. Administrative access is held by the office, and PureTensor has no standing connection to the machine unless you choose to grant one for support.
Optional outbound connection for software updates only, on the office's schedule and with the office's approval. It can stay closed.
The hardware is the family's asset. It sits in premises the family controls and is covered by the physical security already in place.
Administrator credentials are set by the office at handover. Support access, if wanted, is granted per session and logged.
Every query and every document the system reads is recorded locally, so the office can evidence exactly what was processed and by whom.
Built for offices that answer to more than one jurisdiction.
A family with holdings in London, Geneva, Luxembourg and the Gulf has data-residency rules in each. A unit the office owns satisfies all of them at once, because the data never moves.
United Kingdom and Europe
UK GDPR and the EU regulation are met without an international transfer assessment, because there is no transfer. Nothing to add to the register of processors.
Switzerland and Luxembourg
Banking and professional secrecy obligations stay intact. No outsourcing notification, because no outsourcing has taken place.
Gulf financial centres
DIFC, ADGM and national data-protection laws increasingly require in-country processing. A unit in the office is in-country by definition.
Own it and run it yourselves, or own it and let us look after it.
Either way the unit is the family's. The difference is who carries the day-to-day.
Serious hardware, in a box that fits where your systems already are.
Indicative configuration. Final sizing follows a short conversation about volumes and the number of people who will use it.
| Processors | One or two NVIDIA RTX PRO 6000 Blackwell GPUs96 GB of memory each, the professional line used in engineering and medical imaging |
|---|---|
| Models | Leading open-weight AI models, run entirely on the unitselectable by the office, updated on the office's schedule, no external service required |
| Capacity | Thousands of pages an hour for review and extraction tasksa full data room is an afternoon's work, not a week's |
| Form factor | Standard rack or tower server, sized for an office comms room or a residenceordinary mains power, no special cooling, quiet enough for a private study |
| Integration | Connects to your document store, mail and portfolio systems over the internal networkworks alongside existing systems, replaces none of them |
| Storage | Encrypted local storage, keys held by the officeindexes and logs stay on the unit; source documents stay where they are |
From a conversation to a working system in weeks, not quarters.
Conversation
An hour with the people who own the problem: the CIO or head of the office, and whoever runs its technology. We agree the first two or three uses.
Pilot on real material
A unit on your premises, one closed transaction or one reporting cycle, measured against how the work was done last time.
Install and connect
Sized for your volumes, installed where you choose, connected to your document store and mail.
Handover or handhold
Training for your nominated operator, or the start of the managed service. Either way, the keys are the family's.