LegalFab
Confidential
Architecture overview
LegalFab · Governance Architecture

A governed stack, from raw source to trusted action

One foundation that resolves the firm's estate in place, and a workforce that reasons and acts on it — governance and a boundary woven through every layer. Each part is referenced below.

Tap a numbered part on the diagram to open its detail · tap any reference entry to locate it on the diagram.

Data rides each connector in its true direction — read & resolve, reason & act, gated write-back, metadata to the control plane.
CUSTOMER BOUNDARYyour cloud · VPC · on-prem · air-gappedDATA PLANEreads · resolves · indexes — in-boundary13GOVERNANCE & OBSERVABILITY · enforced at every layerUsers & surfaces6lawyers · partners · knowledge professionals · business services · clients / in-house · regulators — role-based, entitlement-scopedTHE FIRMLegalFab · one platformAgentic layer — the governed workforce7WORKFORCEAgencies · screen · monitor · triage · investigate · narrate · assure · Rule Studio (no-code) · BPM flows — versioned, testable, replayableAutonomy dial: deterministic → BPM-governed → human-in-the-middle → self-organising → pure agenticDeterministic gate — a model proposes; the gate disposes. Every output points back to source.The resolved knowledge graph9THE SEAMone graph on active metadata — entities · relationships · lineage · not an ingested copyKnowledge Fabric — the foundation10FOUNDATIONUnify in place — any cloud · on-prem · air-gapped — connect, don't copyAuto-discovery — types · keys · distributions · anomalies · undocumented join pathsSensitive-field detection & tagging — personal · financial · restricted, at sourceSchema & ontology derivation — derived from your data — no hand-built ontology programmeEntity resolution — attribute matching + active learning + structural similarity; low-confidence → human adjudication; reversible & loggedField-level lineage — where every value came from — the basis of a defensible answerDerived, not drawn — the world-model stays current as new records arrive.DATA SUBNETgraph store · encryption at rest · no egress route · warm replica across zonesthe resolved graph is persisted here — inside the data plane, never beyond the boundaryC1gateway → graph storeC5keys · KMS / HSMThe estate — systems of record, in place11THE FIRMdatabases · ERP / HR · CRM / SaaS · warehouses & lakes · event streams · documents & DMS · practice management · APIs · external dataRaw records stay behind the boundary — no copy, no staging, no egress. The Fabric resolves over them where they live.alerts · cases · defensible narrativesfeedsreasons & actsderive · resolveread & resolve in placeconnect, don't copy · raw records stay putDETERMINISTIC GATEgated write-backC2identity · SSO (SAML/OIDC)C3services · mTLSC4egress · default-deny · fail-closedmetadata & config onlyCONTROL PLANE12vendor-side — Foundation /Professional editions onlyschedules · policies · signed updatesnever documents · never promptsSovereign edition: no control plane —nothing crosses the boundary, ever.raw datanever crosses0 BRAW EGRESS14C1–C5 · named enforcement points — inspectable · logged · provable15LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)LegalFab — Governance Architecture (Interactive)
Layers
FOUNDATION
WORKFORCE
GOVERNANCE
THE FIRM
Flows
read / resolve · derive
reason & act · outputs
gated write-back
metadata & config only
Enforcement
Cnamed boundary crossing — inspectable · logged · provable
FOUNDATION unify · derive · resolve, in place
WORKFORCE governed agencies that reason & act
GOVERNANCE enforced at every layer · audited
THE FIRM people & systems of record, in place
Cross-cutting · spans every layer
Sovereignty
In-boundary & sovereign1
No raw data leaves. Foundation · Professional · Sovereign editions, with an air-gap option.
Control
Governed at every layer2
Source-enforced, role- and attribute-based access, immutable audit — on every action.
Truth
Grounded, not generative3
Every output attributable to source — assembled from evidence, not guessed.
Defensibility
Reproducible4
Replay the exact evidence, data state, rule versions and execution path — any time later.
Openness
Model- & cloud-agnostic5
Bring your own model, including open-weight, hosted locally. Compounds as models improve.
The stack · surfaces → estate
Users & surfaces6
The firm
Role-based, entitlement-scoped access. An agency acts under the entitlements of the user it acts for.
LawyersPartnersKnowledge professionalsBusiness servicesClients / in-house counselRegulators / courts
LegalFab · one platform
Agentic layer — the governed workforce7
Workforce
Agencies — teams of specialised agents with one shared job — reason and act on the graph. Composed no-code, by the business.
Agencies · screen · monitor · triage · investigate · narrate · assure Rule Studio — logic in plain business terms BPM flows — versioned · testable · replayable Autonomy dial — deterministic → BPM → human-in-the-middle → self-organising → pure agentic Deterministic gate — a model proposes; the gate disposes Experiences — drafting · research · doc review · contract analysis · knowledge Q&A · legal hold · matter management
Governance & observability8
Spine · every layer
Not a wrapper bolted on the end — enforced at the source, on every action.
Policy & guardrails (RBAC · ABAC · ethical walls)Model & tool gatewayContext & groundingMonitoring & driftImmutable audit & lineageRisk & compliance
The resolved knowledge graph9
The seam
One resolved graph on active metadata — entities, relationships and lineage. Not an ingested copy. The world-model the workforce reasons on.
Knowledge Fabric — the foundation10
Foundation
Unifies the estate in place and derives the model from the firm's own data — no migration, no hand-built ontology.
Unify in place — any cloud · on-prem · air-gapped Auto-discovery — types · keys · distributions · anomalies · join paths Sensitive-field detection & tagging Schema & ontology derivation Entity resolution — attribute matching + active learning + structural similarity; low-confidence → human adjudication; reversible & logged Field-level lineage
↑ the graph feeds the agencies · the agencies act on the graph · every output points back to source ↑
The estate — systems of record, in place11
The firm
Raw records stay behind the boundary. No copy, no staging, no egress — the Fabric resolves over them where they live.
DatabasesERP / HRCRM / SaaSWarehouses & lakesEvent streamsDocuments & DMSPractice managementAPIsExternal data
Deployment & boundary
Control plane
Metadata & config only12
Schedules, policies, definitions. Never documents, never prompt content.
Data plane
Runs entirely in-boundary13
Reads, resolves and indexes inside the firm's environment — the graph store lives here.
The boundary
Default-deny · fail-closed14
Raw records never cross — by construction, not by policy alone.
Enforcement
Named crossings C1–C515
Every crossing inspectable, logged and provable — the diagram a CISO can read line by line.
Keys
Your KMS / HSM16
You bring the keys and keep them; in the sovereign edition, inside your enclave, tamper-evident.
0 bytesraw data egress

Defensibility

Prove, explain and audit AI-assisted work — grounded, attributable, reproducible.

refs 2·3·4·8

Portability

Model- and cloud-agnostic; the estate stays in place; nothing ingested, no lock-in.

refs 1·5·13

Client assurance

Credible, auditable proof — not assurance — for clients and regulators.

refs 4·8·15
Principle

Governance is not an add-on. It is one foundation and one governed workforce, designed as one — resolved data in place, agencies that act on it, and a boundary raw data never crosses. That is what makes AI-enabled legal work trustworthy, auditable and defensible.

References — each part, its capability, and where it is answered

Cross-cutting guarantees
1
In-boundary & sovereign. Runs in the firm's cloud, tenancy, data centre or air-gapped enclave; three editions, no raw data leaves. §1a
2
Governed at every layer. Access, policy, approval and immutable audit enforced at source, on every action; RBAC + ABAC. §3a · §3c
3
Grounded, not generative. Answers assembled from evidence, each line traceable to source; abstains where grounding is absent. §4b
4
Reproducible. Replay the exact evidence, historical data state, rule versions and execution path that produced a result. §3c
5
Model- & cloud-agnostic. Bring your own model, including open-weight hosted locally; the platform compounds as models improve. §1b · §1d
The stack
6
Users & surfaces. Role-based, entitlement-scoped access; agencies act under the acting user's entitlements. §3a
7
Agentic layer. Agencies, no-code Rule Studio, BPM flows, the autonomy dial and the deterministic validation gate. §5a · §5b · §5c
8
Governance & observability. Policy/guardrails, model gateway, grounding, monitoring, immutable audit and lineage — spanning every layer. §1b · §3 · §4
9
Resolved knowledge graph. One graph on active metadata — entities, relationships, lineage; a projection over live sources, not an ingested copy. §2a · §6c(i)
10
Knowledge Fabric. Unify in place, auto-discovery, sensitive-field tagging, schema/ontology derivation, entity resolution, field-level lineage. §2a · §2b · §4a
11
The estate. Systems of record resolved in place — databases, ERP/HR, CRM/SaaS, warehouses, streams, documents/DMS, APIs; raw records never egress. §1a · §2a
Deployment & boundary
12
Control plane. Works only on metadata and configuration — schedules, policies, definitions; never documents or prompt content. §1a · §1b
13
Data plane. Reads, resolves and indexes entirely in-boundary; the graph store sits in the firm's chosen region. §1a · §2a
14
The boundary. Default-deny, fail-closed egress; raw records never cross — by construction. §1a
15
Named enforcement points (C1–C5). Every crossing inspectable, logged and provable — a boundary a CISO can verify line by line. §1a · §3c
16
Keys. The firm's KMS/HSM; in the sovereign edition, inside the firm's enclave, tamper-evident. §1a
LegalFab · Governance Architecture
Architecture & capabilities · confidential