Steps
- 1
Keep client documents in firm-owned storage by default.
- 2
Use Mike AI for workflow state, source references, review decisions, output history and audit events.
- 3
Do not enable private document body storage without approved retention, deletion and audit evidence.
- 4
Use role-based access and audit exports to review workspace activity.
- 5
Keep external sends, Microsoft consent and DMS connections under administrator control; AI processing follows the firm's recorded provider, storage and review policy.
Checks
Document body storage remains disabled unless separately approved.
Firm names appear only inside authenticated workspaces or direct private communications.
Public pages use fictional examples and no customer-status claims.