# Mike.ai 60-day controlled engagement pack

Account: Northstar Legal Group

Boundary: Controlled regional-law-firm engagement pack. Not affiliated with, approved by, endorsed by, used by, or being evaluated by any real law firm. No private client document body storage is enabled.

Position: A self-service Starter 5 workspace that lets partners inspect completion pressure, reviewer gates, export locks, Office-readiness and ROI evidence before any private-source approval.

Commercial terms: Starter 5 - £495/month. Implementation: Optional - £1,950 one-off. Managed support: Optional - £750/month. 60 days, then keep, stop or expand.

Readiness: engagement-pack-ready

## Scope

- Initial workflow scope: Scottish conveyancing completion readiness board; Advance-notice, lender, title, LBTT/ADS, cashroom and post-completion lanes; Redacted evaluation source-map and Office-readiness pack; Reviewer queue, export locks and monthly ROI readback Evidence: /mike-ai/evidence-cockpit, /mike-ai/property-suite, /mike-ai/office-readiness
- Buyer responsibilities: Nominate owner/admin, supervising reviewer and operations contact; Provide only approved redacted or non-confidential operating data during public evaluation; Confirm review policy before any output is used outside the deployment team; Attend 30-minute weekly blocker and ROI readback Evidence: /mike-ai/signup, /mike-ai/private-admin, /mike-ai/assurance
- Mike.ai responsibilities: Configure the controlled workspace and workflow assumptions; Maintain no-affiliation copy and private-data activation boundaries; Provide evaluation review rows, export-lock evidence and ROI/control report; Document gaps honestly in the benchmark and buyer assurance pack Evidence: /mike-ai/evidence-room, /mike-ai/roi-report, /mike-ai/internal-v3

## Controls

- [active] Controlled data boundary: The public engagement pack can be inspected without private client names, file bodies, mailbox access or DMS access.
- [active] Reviewer gates and export locks: High-risk rows must be reviewed before external use, which fits supervised legal operations rather than unsupervised generation.
- [gated] Named-user Access boundary: Private workspaces move behind Cloudflare Access and active membership checks before any private source work.
- [blocked] Private source vault: No raw private document body storage is enabled until retention, deletion and audit drills are approved.

## Decision Gates

- Start gate: pass if The firm accepts controlled-data evaluation and names a supervising reviewer. Stop if The buyer requires private client document processing before Access, retention and deletion approval.
- Week-two control gate: pass if The board shows repeatable blockers, owners and export locks that the team recognizes. Stop if The workflow is too bespoke, too low-volume or not owned by a manager.
- Day-60 commercial gate: pass if Measured saved time, control value and reviewer adoption justify the Starter 5 subscription. Stop if Usage, reviewer action or value evidence is too weak to defend.

## Acceptance Criteria

- Public engagement page and exports contain no real-firm approval, endorsement, usage or evaluation claim.
- The engagement can be evaluated with controlled data and no private client document bodies.
- Review gates, export locks, ROI readback and Office-readiness evidence are visible before signup.
- The commercial offer starts with Starter 5 self-service and does not imply annual enterprise lock-in.
- Private sources, Microsoft admin consent, DMS access and external sends remain separately approval-gated.

## Required Approvals Before Private Data

- Cloudflare Access application, policy, audience and signed JWT readback
- Named-user membership enforcement in the private admin UI
- Retention/deletion drill with source metadata records
- Audit export and access-review evidence
- Tenant administrator consent and selected-source security acceptance
- Document body storage remains disabled
