A private workspace where boards, deal teams, legal matters and other small trust-bound groups adopt modern AI without the trade-off. Hosted in Switzerland. Built so that no one outside your group — including our own staff — can see your data, even when the system is using it. For the work where the cost of a leak is measured in years.
First built for our own family-office work. Now offered to a wider set of groups whose work shares the same shape: closed, sensitive, and worth getting right.
Every closed group of professionals — five directors on a board, a dozen people in a deal room, a legal team running a regulated matter — is now caught in the same bind. The consumer AI products are out of bounds: feeding privileged or material non-public information to a vendor whose terms permit training is not a defensible decision. The enterprise AI products are built for thousands of seats inside a single company, not for the small, cross-organisational, advisor-laden rooms where the actual decisions get made.
So most of these rooms do nothing. Members go back to their personal AI accounts on the side, and the work of the room continues to live where it has always lived — in inboxes, scattered files, and the heads of two or three people.
The trade-off being offered — capability or confidentiality, pick one — is not a real trade-off. It exists because nobody has built the alternative for groups of this shape.
We have.
Steward is shaped for groups where every member is trusted, every document is sensitive, and the work persists across years. If your room looks like one of the four below, the fit is likely. If it looks like something we have not yet listed, we want to hear about it — that prompt is at the bottom of this page.
Listed companies, foundations, regulated entities, pension boards.
What did the board actually decide on the dividend policy review of 2022, and what conditions did the audit committee attach?
Write to us about your board →M&A teams, deal rooms, IC, private equity, special situations.
Across our last twelve diligences, where did revenue quality assumptions diverge from what we found in the first ninety days post-close?
Write to us about your deal team →In-house legal, GC offices, outside counsel project rooms, regulatory teams.
What positions has opposing counsel taken on indemnification scope across the last four matters with this firm — and where have they conceded?
Write to us about your matter team →Excos, corporate development, transformation programmes, sensitive strategic work.
When we last looked seriously at exiting the Iberian business in 2024, what assumptions did we make and which of them have changed?
Write to us about your committee →Each works on its own. Together they make Steward the medium your group's work happens in — not a tool you log into when you remember to.
Ask anything that lives in your group's documents, decisions and prior conversations. Steward reads across your permitted corpus and answers with citations to the actual source — minutes, memos, term sheets, opinions, board packs, advisor correspondence. Your group's institutional knowledge becomes searchable, not just storable, and every answer can be promoted into the room's standing record.
The everyday questions your members would otherwise put to ChatGPT or Claude — research, drafting, summarising, structuring — answered inside your sovereign workspace. Frontier model quality with the data protections your work requires. No queries leave the group by default. No conversation enters anyone's training set.
Steward can take on recurring work and run it for you. Compile the pre-read for every quarterly meeting from the prior period's documents. Pull every newly-filed document for an active matter and summarise the changes. Flag anything overdue from the last meeting's resolutions. Set the task once. The work happens, with audit trail, until you change your mind.
Underneath every answer, a living map of your room: people, entities, matters, decisions, advisors, deadlines — linked by how they touch each other. The graph is what lets Steward navigate your records the way a long-serving secretary would, rather than searching them like a database. Visible in the workspace, exportable as your own folder of wiki pages — yours regardless of where your stack goes.
Steward is the foundation, not the ceiling. Reporting dashboards, custom workflows for your particular committee, integrations with the systems of record you already run — anything you'll want to add over the next five years reads from the same sovereign substrate. Build it yourselves on the same files Steward has been gathering all along, or commission us to build it for you. Either way, no re-ingestion, no re-migration, no vendor lock-in at the foundation layer. The technology decision you make once, that makes every subsequent decision easier.
When we say no one outside your group can read your data — not us, not the infrastructure provider, not a court order to either of us — that claim has to rest on something more than policy. It rests on a category of infrastructure called confidential computing: memory that stays encrypted even while it is being processed, and hardware that attests to exactly what code is running before it agrees to unlock your data. Without it, "we cannot read your data" is a promise. With it, it is a property of the silicon.
This is the substrate underneath every promise this page makes. Without it, "no one but you can see your data" is something you have to trust. With it, it is something you can verify.
Steward is sold to the room, not the company. We meet groups where they are — from a single committee piloting against a defined corpus, to a federation of related rooms sharing a single sovereign tenant. Pricing is per-seat with a tenant base; numbers come from a short scoping conversation rather than a configurator.
One closed group — a board, a committee, a deal team, a matter — with its own corpus and its own House Rules. Self-administered. Often the way an organisation tests Steward before extending it.
Several related rooms inside one organisation — board, exco, deal team, matter teams — each with its own permissions and its own House Rules, sharing a single sovereign tenant and a common knowledge graph where the organisation chooses to share.
For organisations whose posture or contracts require complete physical custody — government, defence, regulated infrastructure — Steward deployed on dedicated Swiss-sovereign infrastructure or, in some cases, on infrastructure of your own. Same product, deeper isolation.
Steward began inside a Swiss family office, where the fit was unambiguous. As we extend to other closed groups, we are deliberately listening before we generalise. The four personas above are our hypotheses about which rooms share enough of the underlying shape to make Steward worth their consideration. We may be missing one — or describing one in language that does not match how the work feels from the inside.
If you are inside a room that the four cards above do not quite capture, we would value a few sentences from you about the shape of your work.
Tell us about a room we did not describe →We read each one personally. Replies within a few days.
Steward was built inside ANA Wealth, a Swiss family office, for our own work. Family offices were the original room: small, trust-bound, document-heavy, advisor-laden, with decades of history that nobody had time to make searchable. The product still serves them — and a separate page describes that fit in detail.
Extending Steward beyond family offices is a deliberate move, not an afterthought. The substrate underneath — sovereign Swiss infrastructure, knowledge graph plus vector retrieval, House Rules per room — turned out to fit a wider class of work than the original use case. Boards, deal teams, legal matters, and strategy committees share the same shape: closed membership, sensitive material, multi-year continuity, and a need for AI that cannot be answered by either consumer or enterprise products as they stand.
We are extending carefully, with one director or general counsel at a time, because the rooms we serve are not the kind of rooms that tolerate being a beta market.