Solutions

Keep client identifiers and material non-public information out of AI tools and court filings.

The AI never holds the identifiers, and documents are screened for MNPI before they reach it. One tool prepares court productions to Rule 5.2. The other lets your people use AI on real documents while names and numbers stay in your own cloud.

Last updated

This page covers three things. A plugin for Claude prepares court filings, redacting to Federal Rule of Civil Procedure 5.2. A privacy gateway swaps names and numbers for placeholders before text reaches an AI model. MNPI screening inside the gateway passes, holds for review or blocks each document. In all three, a person decides what matters.

What goes wrong without redaction?

Client identifiers such as names, Social Security numbers and account numbers end up in AI tools and in court filings. So does material non-public information. It happens because people paste and file what is in front of them.

Are identifiers and MNPI the same problem?

Identifiers and MNPI, material non-public information, are different problems. One is who a document is about. The other is what it reveals about a deal or a position. So the gateway handles them in two steps: it swaps the identifiers, then screens the text. Read how a private AI workspace works or How to keep MNPI out of public AI tools.

Part one: how does court filing redaction work?

The Court Case File plugin for Claude prepares case documents for filing or production. You point it at a folder and say "prepare these for court." It runs inside Claude on the attorney's own computer, shows its full plan first, and writes nothing until told to go. It is offered today.

Point it at the folderThe case documents, where they sit
It shows its planNothing is written yet
Identifiers foundIn your firm's own cloud
Attorney reviews, certifiesEvery production
Production writtenRedacted and Bates stamped

Originals are read where they sit, processed in memory, and never uploaded or stored anywhere new.

What Rule 5.2 removes

Identifiers are removed for good, following Federal Rule of Civil Procedure 5.2. This describes the rule the plugin follows. It is not legal advice.

  • Social Security and taxpayer numbers

    Only the last four digits remain.

  • Birth dates

    Only the year remains. Other dates are left alone.

  • A minor's name

    Reduced to initials when the text clearly marks a minor. Anything uncertain is flagged for the attorney.

  • Financial accounts

    Bank, card and routing numbers keep only the last four digits.

The rule is a floor. The default policy also fully redacts addresses, emails, phone numbers, license and passport numbers and IP addresses. A minimal preset applies exactly the rule's four requirements. The firm chooses per case.

What else it produces

  • Bates stamps

    Every page, in sequence.

  • A document inventory

    One row per document, with no identifier value in it.

  • A draft privilege log

    Documents that look privileged are flagged and queued for a person.

What a person still decides

  • Certification

    The reviewing attorney personally certifies every production, including every flagged and withheld document.

  • Privilege

    The tool never decides what is privileged. It surfaces candidates and makes no legal determination.

  • The go ahead

    A practice run shows what it found, what it would redact and what it set aside. Nothing is written until approved.

Part two: what is the privacy gateway?

The privacy gateway sits between your firm and the AI model, for everyday AI use. Before text reaches the model, names, Social Security numbers, account and routing numbers, emails and phone numbers are swapped for placeholders. The model works on the substance. It removes who and keeps what, so amounts, dates and substance pass through and the analysis stays useful.

It is deployed per firm, into the firm's own Azure environment, as part of an engagement.

Where does the data live?

Inside your firm's Azure environment

Client documentsThe placeholder vaultThe real values

Outside

The AI model receives placeholders, and the real values stay in your environment. DoubleChecked receives only anonymous usage counts.

How does it work?

  1. Text is read from the document or the prompt.
  2. Identifiers are swapped for placeholders.
  3. The model works on the substance.
  4. The real values are restored on the firm's side.

What can it handle?

It works on PDF, Word, Excel and scanned documents, not only pasted text.

What a person still decides

Staff still decide what to ask and what to rely on. They check the answer before it goes anywhere. The gateway does not decide what a document means, and a person reviews anything the MNPI screening holds.

How does MNPI screening work?

MNPI screening is a step inside the gateway. It runs after identifiers are swapped for placeholders, inside the firm's own Azure environment, on the firm's own model deployment. Nothing leaves the firm's environment for this check.

Placeholder text inIdentifiers already swapped
Language passPhrases that signal non-public intent or plans
Structure passTickers, positions and concentration, judged against widely traded instruments
Model adjudicatorAnswers in fixed reason codes
Pass, hold or blockA person reviews what is held

What can happen to a document?

  • Pass

    The document goes on to the AI model.

  • Hold for human review

    A person can release it after confirming.

  • Block

    The document is quarantined. The gate cannot release it.

Who decides, and where it runs

  • The firm defines MNPI

    The firm decides what counts as MNPI for it.

  • Set for each firm

    The policy is set for each firm at deployment.

  • Judgment calls go to a person

    When the screening is unsure, it holds the document for review.

  • It fails closed

    No setting makes it pass documents through when the check cannot run.

Is it the right fit?

It fits when

  • Your people already paste client material into AI tools and you want identifiers kept out.
  • Productions go out under Rule 5.2 and the redaction is done by hand today.
  • Your firm handles deal or trading information and wants documents screened before they reach an AI tool.
  • You work in PDF, Word, Excel and scanned documents.
  • You have, or will set up, your own Azure subscription.
  • An attorney or named reviewer will check the output.

It is the wrong tool when

  • You want a tool to decide what is material without a person. It holds judgment calls for review.
  • You expect it to catch everything. No screen does. It is one control alongside policy and training.
  • You want a tool to decide what is privileged. It never does.
  • Your firm has no Azure subscription and does not want one.
  • You expect it to file or certify without a person reviewing.

Where could a firm like ours use it?

These are illustrations of where the two tools could be used, grouped by industry. They are examples of what is possible, not descriptions of client work.

Law firms

Example

A document production redacted to the rule

Today
Paralegals black out Social Security numbers, birth dates and account numbers page by page, then number the pages by hand.
With redaction
The plugin shows its plan, redacts to Rule 5.2 and Bates stamps every page in sequence, with an inventory that holds no identifier values.
A person still decides
The reviewing attorney certifies the production before it is filed.
Example

A draft privilege log for a large production

Today
A team reads every document to spot the ones that might be privileged, then types the log by hand.
With redaction
Documents that look privileged are flagged and queued, and the plugin drafts the log entries from the inventory.
A person still decides
An attorney decides what is privileged and what is withheld.

CPA and forensic accounting firms

Example

Case documents prepared for an expert report exhibit

Today
Staff copy bank statements and returns into exhibits and mask account and taxpayer numbers by hand before sharing them.
With redaction
The plugin keeps only the last four digits of account and taxpayer numbers and stamps each page, using the case folder as it sits.
A person still decides
The engagement lead reviews the exhibit and decides what is shared.
Example

AI summaries of client workpapers with names swapped out

Today
Staff avoid AI tools for workpapers because client names and numbers would travel with the text.
With redaction
The gateway swaps names and numbers for placeholders. The model summarises amounts and dates, and the real values return on the firm's side.
A person still decides
The reviewer checks the summary against the workpaper.

Investment advisers and asset managers

Example

Research notes screened before an AI summary

Today
An analyst keeps research notes away from AI tools, because they may hold language about non-public plans.
With redaction
The gateway swaps identifiers, then the MNPI screening reads the notes. It holds them for compliance review when the language suggests non-public plans, and passes them otherwise.
A person still decides
A compliance reviewer decides whether a held note is released.
Example

A portfolio workbook screened for concentrated positions

Today
A workbook of positions stays out of AI tools, since it may reveal a sensitive position.
With redaction
The structure pass judges positions and concentration against widely traded instruments. Concentrated positions in thinly traded names are held for review, while a list of widely traded large-cap names passes.
A person still decides
The reviewer decides whether a held workbook goes on to the AI model.

Mortgage and lending

Example

Loan file summaries from scanned documents

Today
A reviewer reads scanned pay stubs, statements and disclosures by eye, because borrower names and numbers rule out AI tools.
With redaction
The gateway reads the scans, swaps borrower identifiers for placeholders and lets the model summarise what the file contains.
A person still decides
The underwriter reads the source pages and makes the call.
Example

Replies to borrower questions drafted without borrower identifiers

Today
Staff write each reply from scratch, since pasting a borrower's message into an AI tool would share their name and loan number.
With redaction
The gateway swaps the identifiers in the message for placeholders. The model drafts the reply, and the real values are restored.
A person still decides
A staff member reads and sends each reply.

Want to see it on your own documents?

Bring a sample. We will show what it finds and what it leaves.

How do we set it up?

Step 1ScopeOne working session. A plan and a price.
Step 2BuildSet up in your environment, shown early and often.
Step 3LaunchYour people trained on their real documents.
Step 4RunHosted, watched, improved.

Every project gets a fixed price after one working session, and you know the number before we build.

  1. Decide which part you need: court filings, everyday AI use, or both.
  2. Confirm the Claude workspace and the firm's own Azure subscription the tools will run in.
  3. Choose the redaction policy: the default, or the minimal preset for court filings.
  4. Try it on sample documents and check what it found and what it left.
  5. Write the rules for use, including which tools may touch which material.
  6. Train the people who will use it, then switch on with the practice run in place.

Questions buyers ask

Does the AI ever see the real names?

The AI model receives placeholders, and the real values stay in your firm's environment. For court filings, document text goes only to the firm's own Azure AI service in the firm's own subscription, to find identifiers. DoubleChecked never sees it.

Where do our documents go?

Originals are read where they sit, processed in memory, and never uploaded or stored anywhere new. The redacted production is the one thing meant to leave. For the gateway, documents and the placeholder vault stay in your Azure environment.

Does it screen for MNPI?

Yes, inside the gateway. It makes three passes: language, structure and a model adjudicator. Each document passes, is held for a person, or is blocked. The firm defines what counts as MNPI for it.

What happens when the screening is unsure?

It holds the document for human review. A person can release it after confirming. A block cannot be released by the gate. It fails closed.

Who decides what is privileged?

A person does. The plugin flags documents that look privileged and queues them for review, and it drafts the log. It never decides what is privileged. The reviewing attorney certifies every production, including every flagged and withheld document.

What does Rule 5.2 require to be removed?

Social Security and taxpayer numbers keep the last four digits. Birth dates keep the year. A minor's name becomes initials. Financial account numbers keep the last four digits. This describes the rule the plugin follows, not legal advice.

What do we need to run it?

Claude, and your firm's own Azure subscription. The plugin runs inside Claude on the attorney's computer. The gateway is deployed into your Azure environment as part of an engagement, with sign-in and roles set up for your people.

What does it cost?

Every project gets a fixed price after one working session, and you know the number before the build starts. A working session is 45 minutes on one idea from your firm. We sign an NDA before it.

Tell us what you want built.

A working session is 45 minutes on one idea from your company: what to build, what it needs, and what it would cost.

  • A fixed price before we build
  • Your data stays in your environment
  • A record of every action
  • Reference calls under NDA
  • NDA before the first session
  • Since 2019
Start a project