niceley.ai · review template
AI data-custody one-pager
Use this to make an AI workflow’s custody story explicit before approval. It is a discussion template, not legal advice or a claim of regulatory compliance.
Data in scope
What documents, prompts, audio, or records enter the workflow?
Processing location
Which machine runs the model and supporting services?
Storage
Where are source files, indexes, outputs, logs, and backups stored?
Network paths
What leaves the machine, if anything? Name each deliberate exception.
Access
Which people and accounts can use, administer, or remotely reach the system?
Actions
What may the agent do? What requires review? What is blocked by default?
Retention
How long are source data, generated output, and action receipts kept?
Verification
What happens when the network is disconnected and the real workflow runs?
Explicit non-claims
□ Local deployment alone equals compliance
□ The system is 100% secure
□ Model output may skip professional review
□ No network exception exists unless listed above