{"title":"Mike.ai buyer assurance pack","accountName":"Northstar Legal Group","boundary":"Controlled buyer assurance pack for a UK law-firm evaluation. Not affiliated with, approved by, endorsed by, used by, or being evaluated by any real law firm.","dataBoundary":"fictional-sample-and-metadata-only","procurementPosition":"Starter 5 has a self-service subscription path into controlled sample mode. Private client sources, live Microsoft consent and formal enterprise assurance remain separately gated.","sections":[{"id":"data-boundary","title":"Data boundary and private-data bar","owner":"Product and security","status":"live","buyerQuestion":"What data can a firm safely use during evaluation?","currentPosition":"Public routes use fictional, sample, redacted, or source metadata records. The Worker health model keeps documentBodyStorageEnabled=false.","evidence":["/mike-ai/assurance","/mike-ai/evidence-room","/api/mike-ai/health","MIKE_AI_ALLOW_DOCUMENT_BODY_STORAGE=false"],"remainingGate":"Private document body storage requires approved Access, retention, deletion, storage and audit evidence."},{"id":"tenant-model","title":"Tenant model and named-user access","owner":"Platform","status":"controlled","buyerQuestion":"How are firms, users, roles and workspaces separated?","currentPosition":"Worker private routes require bearer auth, active workspace membership and role checks; Cloudflare Access JWT verification is implemented for enforced mode.","evidence":["workers/mike-ai-api/src/index.js","/mike-ai/private-admin","/mike-ai/internal-v3","workspace_memberships role checks"],"remainingGate":"Live Cloudflare Access application, audience/JWKS configuration and production token readback remain approval-gated."},{"id":"retention-deletion","title":"Retention, deletion and source vault","owner":"Backend","status":"blocked","buyerQuestion":"Can document retention and deletion be proven before private use?","currentPosition":"Metadata records carry retention labels, storage refs, processing state and deletion state. Raw document bodies remain refused while storage is disabled.","evidence":["0004_private_vault_beta.sql","/mike-ai/internal-v3","source metadata records","document body rejection tests"],"remainingGate":"Complete a metadata deletion drill, signed object access design and recovery/hold policy before enabling object bodies."},{"id":"review-export","title":"Human review, export locks and audit","owner":"Legal operations","status":"live","buyerQuestion":"What prevents unsupported output leaving the workflow?","currentPosition":"High-risk unresolved items block external export in the browser workflow; public packs expose reviewer status, source refs, locked exports and audit-ready evidence.","evidence":["/mike-ai/supervision-queue","/mike-ai/completion-pack","/mike-ai/roi-report","role-limited audit export route"],"remainingGate":"Persisted production queue UI, reviewer assignment readback and audit export acceptance test for a live Access workspace."},{"id":"model-policy","title":"Model policy and no-training stance","owner":"AI governance","status":"controlled","buyerQuestion":"Does the system send private matter data to a model provider?","currentPosition":"Private source assistant calls remain disabled. Assistant-run records store provider/model/state and hashed refs only until provider controls are approved.","evidence":["/mike-ai/internal-v3","/mike-ai/private-admin","assistant-runs metadata route","source-grounding insufficiency tests"],"remainingGate":"Approve provider terms, workspace model policy, prompt/output audit and reviewer sign-off before private-source model calls."},{"id":"commercial","title":"Commercial controls and workflow economics","owner":"Commercial","status":"live","buyerQuestion":"How is spend kept tied to measurable operational value?","currentPosition":"The founding workflow offer is fixed-scope, controlled-data and measured against monthly matters, reviewer actions, export locks and estimated minutes saved.","evidence":["/mike-ai/engagement-pack","/mike-ai/board-pack","/mike-ai/roi-report","billing records controlled route"],"remainingGate":"Live Stripe products, invoices, webhooks and reconciliation remain disabled until separately approved."},{"id":"integration-boundary","title":"Microsoft and DMS integration boundary","owner":"Integrations","status":"planned","buyerQuestion":"What is the realistic Microsoft/DMS path?","currentPosition":"The V3 sequence is SharePoint/OneDrive matter-folder import first, Outlook evidence pack second, DOCX reviewed output third, then DMS connectors.","evidence":["/mike-ai/office-readiness","/mike-ai/source-map","/mike-ai/integrations","Word-ready completion pack export"],"remainingGate":"No Microsoft Graph consent, Word add-in, Outlook add-in, Copilot extension, iManage or NetDocuments connector is live."}],"decisionGates":[{"id":"controlled-workspace","gate":"Run a 60-day controlled deployment conversation","status":"ready","owner":"Workspace enablement team","requiredEvidence":"Use controlled or approved redacted data only, with the engagement pack and assurance pack attached."},{"id":"access-readback","gate":"Enable named-user private workspace access","status":"gated","owner":"Platform","requiredEvidence":"Cloudflare Access application, audience/JWKS, enforced mode, malformed assertion rejection and live health readback."},{"id":"private-documents","gate":"Accept private client document bodies","status":"blocked","owner":"Security and operations","requiredEvidence":"Retention/deletion drill, signed object access, storage audit export, malware scanning and explicit approval."},{"id":"commercial-billing","gate":"Verify production subscription activation","status":"gated","owner":"Commercial","requiredEvidence":"Signed checkout, webhook verification, entitlement activation, invoice policy and reconciliation readback."}],"policyPrinciples":["No public real-firm endorsement, approval, evaluation, staff name, matter detail, or brand implication without explicit permission.","No private client document body storage until named-user auth, tenant checks, object storage, retention, deletion, and audit export are implemented.","No public claim that Mike.ai can do everything Harvey can do; capability claims must match the benchmark scorecard.","No legal advice automation claim. Mike.ai supports supervised legal operations, source review, and reviewer evidence.","No external send, billing configuration mutation, Microsoft admin consent, DMS connection, or shared-space launch outside its approved operating route."]}