Everyone asks which AI model we use.
Nobody asks what the model isn't allowed to do.
That second question turned out to be most of the work.
Three fences, in plain English.
One: it can only use parts that exist.
Our form and letter editors render a fixed set of building blocks — a text field, a date, a signature pad, a colored callout, a table.
Everything the AI produces is checked against that list before it reaches your screen. Invent a field type that isn't in there and the answer is rejected, not rendered.
It can't draw a button that doesn't exist. Not good behavior — a narrow door.Fence one has a second half, and it's the half people actually worry about. Ask for a violation notice and the AI doesn't type the fines in. It isn't allowed to.
Open violations, the charges on an account, the work orders — it has to place the block that goes and reads them at print time. Hand-writing those figures is written down as forbidden.
The numbers everyone fears an AI inventing are the ones it never gets to write. It picks where the amount goes. The ledger still says what it is.
Two: on a follow-up edit, it changes the line, not the page.
Ask for a shorter second paragraph and it doesn't regenerate the document. It sends the change and nothing else.
The difference between an apprentice who retypes the whole page and one who reaches over and fixes the line you pointed at.
Faster, roughly 30% cheaper to run, and — the part people actually care about — unable to quietly rewrite the paragraph you liked.
Three: there's an off switch, and it belongs to the company.
An organization that wants no AI anywhere near its documents turns it off. Everything else keeps working exactly as it did. Not a downgraded tier, not a phone call with us. A switch.
And if the AI service itself has a bad day, the product doesn't stop. The assist does. You go back to typing, which is where this industry has been the whole time anyway.
We watch every AI request too: what it cost, how long it took, whether it failed. Surprises should arrive as a chart, not as an invoice.
None of this is the exciting part of an AI product.
It is all of the trustworthy part.
Next: the backbone all of this stands on — one contract, and somebody else's database.