Security

How we protect your data.

The commitments behind every FortisWorks system, in plain language you can hold us to and explain to your clients.

Drafting tools resting on an architectural blueprint.
Our commitments

Private by design, not by policy alone.

Runs in your environment

Installed on computers you own and control. It doesn’t depend on our servers or anyone else’s.

Air-gapped when required

For the most sensitive work, the system has no internet connection, so there’s no network path for data to leave.

No outside AI services

Nothing goes to public AI tools or AI companies. Any AI runs on your hardware.

No hidden data collection

The software doesn’t report usage, send diagnostics, or contact outside servers.

People approve the results

Unusual items are flagged for review, and AI drafts never go out unapproved.

A clear record

A log of what was processed and when, kept on your machines.

You decide who has access

You control who uses the system and whether we can reach it for support.

A locked server cabinet in an office closet with its network cable unplugged.
Two levels of protection

Match the protection to the risk.

Not every task needs the same isolation. We’ll recommend a level and explain why.

Private

Runs on your computers and never sends data to outside services. Right for most document and back-office work.

Air-gapped

A dedicated machine with no internet connection. Files move in and out only through steps you control. Right for privileged files, donor records, and private AI.

Questions

Common questions about security.

What does “air-gapped” mean?

A computer with no connection to the internet or outside networks, so information can’t leave over a network. We’ll show you exactly how files get in and out under your control.

If you use AI, where does it run?

On a dedicated machine in your office with no internet connection, so nothing is shared with an AI company. If a task doesn’t need AI, we don’t use it.

Will this pass our vendor or security review?

We’re glad to walk your IT staff, compliance team, or outside counsel through the system and answer questionnaires in plain language. Because it runs offline on your equipment, many cloud questions don’t apply.

What hardware do we need?

Rule-based tools usually run on a computer you already have. Private AI needs a more powerful dedicated machine; we’ll recommend one and help set it up.

What happens if something needs to change or breaks?

Your staff get training and a plain-language guide. If something needs attention, we fix it on site or through the access you allow. Updates happen only with your approval.

How long does a project take?

A focused tool like the W-2 system often takes a few weeks. Larger systems are phased so you see results early. Your written plan sets the timeline up front.

Start with a conversation

Want to walk your IT or compliance team through it?

We’re happy to meet with your staff, IT provider, or outside counsel to explain exactly how a FortisWorks system handles your data.