The questions a board, its advisers or a procurement reviewer should ask of any AI tool near a boardroom, answered for this platform in one place. Every sentence describes a mechanism the platform has; where something is not yet in place it says so. Nothing here is a promise about an outcome.
> In beta · updated 6 September 2026 · no external party has yet signed a pack
Model inference runs on providers' infrastructure in the Sydney region (ap-southeast-2) for Australian locks. Every model call records the provider, the model identifier and the region it was served from, and the decision pack lists those calls. Where a provider does not expose the serving region for a call, the pack says so rather than asserting it.
Residency is where processing happens. Sovereignty is whose law can compel access. We claim the first and not the second: some providers are US-headquartered companies running in-region infrastructure.
New Zealand: a matter under an NZ-only lock is refused with a named reason. There is no NZ inference path yet; it is not silently served from Sydney.
The table below is generated from the platform's own model catalogue, the same file the engine reads. A provider that is not in this table cannot be invoked.
| Provider | Model reference | Region | Residency class | Status |
|---|---|---|---|---|
| Anthropic | claude.au.reasoning | ap-southeast-2 | in region | in use |
| Openai | gpt.au.reasoning | ap-southeast-2 | in region | in use |
gemini.au.reasoning | australia-southeast1 | ml processing in region | listed — not in use | |
| Xai | grok.us.reasoning | — | offshore | blocked for Australian locks |
| Anthropic | claude.au.delivery | ap-southeast-2 | in region | in use |
| Anthropic | claude.au.fast | ap-southeast-2 | in region | in use |
| Anthropic | claude.nz.reasoning | — | in region | candidate — not in use |
| Deepseek | deepseek.au.reasoning | ap-southeast-2 | in region | in use |
gemma.au.delivery | ap-southeast-2 | in region | in use | |
| Meta | llama.direct.reasoning | — | offshore | candidate — not in use |
| Groq | groq.direct.reasoning | — | offshore | candidate — not in use |
| Xai | grok.direct.reasoning | — | offshore | candidate — not in use |
| Amazon | nova.au.reasoning | ap-southeast-2 | in region | in use |
| Amazon | nova.au.delivery | ap-southeast-2 | in region | in use |
Payments: Stripe, on Stripe's own pages — no card detail is entered on or held by this platform. Email: Amazon SES, ap-southeast-2, link-only notifications. Hosting and storage: Amazon Web Services, ap-southeast-2.
Tax file numbers, ABNs, ACNs, Medicare, payment card, BSB, passport, NZ IRD and NZ NHI numbers are removed from a document before it is stored and before any provider call. The rules catch identifiers, not names: a person named in a board paper is still named in it.
A criterion, an agenda item, a decision record or a place name that carries an identifier is refused rather than silently edited. A document marked privileged is never sent to the panel and never reproduced: it appears in the pack as considered, by title and date.
Not yet verified: the redaction path against a live provider endpoint. The rules pass in isolation; the end-to-end check is an open task.
A decision pack cannot be exported unfinished. Every section is checked against a versioned list; a named, verified signatory is required; a signatory who holds a second factor presents it again at the point of signature. A refusal names the section and offers no override.
Every pack carries a digest — its fingerprint — and records what produced it: which engine ran, how many providers answered, and whether it was a dry run. A dry run is stamped on every page and the stamp is inside the digest.
The platform never advises, decides, recommends or scores. Agreement is counted from each adviser's own declaration, never weighted; a divided panel is shown as divided; doing nothing is always an option considered.
Every step of every debate is written to a hash-chained event log that can be added to but never altered, verified on read, replayable step by step, and exportable per matter as metadata. Support staff do not read pack content.
Not yet in place: object-locked storage for the log. The chain detects alteration; it does not yet prevent deletion of the log itself.
Retention: a meeting that was held is a record and cannot be removed; a confirmed minute closes its agenda, records and actions. A published retention schedule with disposal rules and legal hold is not yet built.
Incident response: the Notifiable Data Breaches scheme applies to us. A documented, exercised runbook is not yet published.
Certification: none held. ISO 27001 and ISO/IEC 42001 are decisions with dated triggers, not work in progress. An independent penetration test has not yet been run.
Accessibility: WCAG 2.1 AA verified on the pack viewer and export flow; an automated gate of 489 checks runs on every screen; five items need a person on a device and are open.
How to read this page. It is assembled from the platform's own controls and registers, and it is checked by the same claims gate as the rest of this site. If a sentence here and the product ever disagree, the product is the record. Back to counselofai.com · Read a sample pack