An AI-assisted workspacefor a consulting firm.

The challenge

A consultant works across many client companies at once. Each company has its own files, requests, meetings, invoices and people, and every one of them expects their information to stay private.

AI can save a consultant hours. Used carelessly, though, it can also mix one client's details into another's answer. The firm needed one workspace where AI helps, but every client's information stays behind its own wall.

What we built

• A workroom for every clientMembers, files, requests, messages, projects and tasks for each client company, with its own home page.
• The right people, the right accessThe owner invites client members and assigns roles. Team members see only the clients assigned to them.
• One view of the businessA dashboard of every client, piece of work and payment. It also covers time tracking, invoices, income and expenses, with spreadsheet imports.
• Meetings that write their own notesMeetings are recorded in the browser, then transcribed and summarized. The recap email goes out only after the owner approves it.
• An AI assistant for the consultantIt answers questions across clients, summarizes each one and drafts weekly updates. Drafts wait for review and are never sent on their own.
• A read-only assistant for each clientClient members can ask questions and get answers drawn only from the records they're allowed to see.
• Set up by talkingA voice conversation with the assistant sets up a new workspace: services, billing style and time tracking. You can interrupt it, just like a person.
• A safe goodbyeRemoving a client deletes its records, files, AI assistant and encryption key through a reviewed clean-up.

How we kept it safe

The hardest part wasn't the features. It was making sure no person, and no AI, could ever reach information that isn't theirs.

• Walls built into the databaseRow-level security in PostgreSQL means each person can only ever read their own company's records, even if the app has a bug.
• A separate key for every clientEach company's files are encrypted with its own key. When a client is permanently deleted, its key is destroyed, so its files become unreadable for good.
• AI that can't wanderEach client company has its own AI agent with a single read-only tool. Every request carries a short-lived signed permission ticket for that person and company, and it can't be replayed.
• Clients decide about AIEvery uploaded document has a "Use with AI" switch. If a client turns it off, nobody can override that, not even the owner.
• Screened, scanned and loggedAI questions and answers are screened, uploads are scanned for malware, and AI activity is recorded in an append-only log.
• A private databaseThe database has no public address and accepts only encrypted connections, with point-in-time recovery and daily backups.

The result

The firm has one workspace for every client, with AI that saves time and walls that keep each company's information its own. It runs in production on Google Cloud, with every change tested automatically and one-step rollback.

See all case studies