White paper library

Resources and white papers

Analysis of the rules, court decisions, and buying questions that shape AI use in legal, behavioral health, and private credit work. Each paper cites its sources in full. Download the ones that fit your role.

General & Strategy

2 papers

General & Strategy

Sotto: The Trust Layer for Regulated AI Work

Why Local-First and Verifiable Audit Are Becoming the New Standard

General & Strategy

Shadow AI in Regulated Industries

Why Employees Use Unsanctioned Tools, and How to Win Them Back Safely

Regulatory Deep Dives

9 papers

Regulatory Deep Dives

Navigating 42 CFR Part 2 in the Age of AI

Why Behavioral Health Providers Face a Harder Compliance Problem Than They Think

2026 Focus

MNPI Risk in Private Credit

What the SEC Is Watching in 2026

Regulatory Deep Dives

ABA Op. 512 + State Bar AI Rules

A Practical Compliance Map for Law Firms

Regulatory Deep Dives

Protecting Attorney-Client Privilege in the Age of AI

Court-Defensible AI for Lawyers Post-Heppner

New

AI, Privilege, and the New Confidentiality Problem

Why Every Prompt Is Now a Confidentiality Decision

Regulatory Deep Dives

AI Privilege: Executive Brief

The 5-Minute Read for GCs and Managing Partners

Regulatory Deep Dives

The Heppner Ruling Explained

What Every Law Firm Needs to Know About AI, Privilege, and Discovery Risk

Regulatory Deep Dives

AI for Therapy Without Breaking Part 2

A Practical Guide for Behavioral Health Practices Using AI for Clinical Documentation

Regulatory Deep Dives

Eliminating MNPI Leakage Risk in Private Credit

Secure, Auditable AI for Analysts and Compliance Teams

Competitive / Positioning

4 papers

Competitive / Positioning

Sotto vs. Microsoft Copilot + Purview

Why Local-First and Verifiable Audit Fit Regulated Industries

Competitive / Positioning

Sotto vs. Microsoft Copilot + Purview: A Technical Deep Dive

Comparing Cloud-DLP and Local-First Architectures for Regulated AI

Competitive / Positioning

Sotto vs. Harvey

Why Governance Matters as Much as Research Capability for Regulated Work

Competitive / Positioning

Why Generic Local AI Falls Short

The Compliance Gap Between Running a Local Model and Running a Compliant One

Role-Specific / Buyer Education

4 papers

Role-Specific / Buyer Education

What General Counsels Should Demand from AI Vendors in 2026

The Contract Terms and Technical Standards That Govern Defensible AI Deployment

Role-Specific / Buyer Education

How IT Leaders in Am Law Firms Can Eliminate Shadow ChatGPT Usage

A Practical Playbook for Detection, Replacement, and Governance

Buyer Guide

The New AI Governance Checklist for Private Credit Funds

Preparing for SEC Examination on AI Data Handling in 2026

Role-Specific / Buyer Education

A Compliance Officer's Guide to Evaluating AI Tools

Six Questions That Separate Defensible Deployments from Liability Exposure

Future / Thought Leadership

4 papers

Future / Thought Leadership

The Future of Regulated AI

What 2026 and 2027 Require from Law Firms, Behavioral Health Practices, and Financial Institutions

Future / Thought Leadership

Local-First AI Architecture

A Technical Primer for IT and Compliance Leaders in Regulated Industries

Future / Thought Leadership

The End of 'Trust Me' AI

Why Verifiable AI Systems Are Becoming a Regulatory and Legal Expectation

Future / Thought Leadership

Why Cryptographically Verifiable Audit Logs Matter

The Difference Between Compliance Assertions and Compliance Evidence