On your infrastructure.
Trained on your files.

Local, private AI for law firms: your own on-premise AI server, trained on your firm’s files, for $99 / lawyer / month.

[ How it works ]
[ 01 - The local option · runs on your own server ]

Meet the Bilbs Box.

On-prem or AWS Bedrock Hardware · Firmware · Weights
BILBS BOX · 4U S/N · BB-26-042
from $99
/ lawyer / month
Audit-first
we scope what your firm needs
Hardware
yours, or we source it

An AI that actually
knows your firm.

Picture this. Every contract, memo, opinion, and brief your law firm has ever written, instantly searchable in plain English. A junior associate asks: “Find the limitation-of-liability clause we used for Acme in 2021.” In seconds. The exact paragraph, cited to the file. A partner asks: “Draft a non-disclosure agreement using our standard terms.” In under two minutes. Written in your firm’s style.

None of this leaves your building. Microsoft can’t see it. OpenAI can’t see it. We can’t see it. The AI runs on a server we install in your law firm’s office, on a network your IT controls. The data on it is yours, period.

Knows your firm’s precedents, contracts, and matter history
Drafts in your firm’s style, sharpest with the optional fine-tuning tier
Cites every answer to the exact source document
Logs every question, a complete record that stays on your server
Talks to your document system, your M365, your practice software
Only your lawyers can see it. Not Microsoft, not OpenAI, not us.
[ Sized to the firm ] 4 configurations

From a boutique practice of 10 lawyers to a full-service firm on an 8-GPU cluster - same software, same runbook. The firm outgrows a tier, we swap the chassis and re-train on the new hardware over a weekend.

[ 01b - The moat · AI memory of the firm ]

What changes the day it goes live.

[ How it works, in plain English ]
  1. 1. We deploy the platform. On your own hardware on-premise, or in your firm’s AWS Bedrock account. Your IT team holds the keys; a free consultation picks the right fit.
  2. 2. It learns your firm. It reads every document, contract, and matter file your firm has worked on, through your existing document system, and stays under your control.
  3. 3. Lawyers ask questions. They open it in their browser, the same way they open Outlook. They ask in plain English. Answers come back in seconds, cited to the source.
  4. 4. Your data stays yours. Never used to train Microsoft’s, Google’s, OpenAI’s, Anthropic’s, or our models. On-prem it can run fully offline; on Bedrock it stays in your own AWS account and region.
[ 01c - A typical session ]

From a question to a cited answer.

[ The five steps ] From sign-in to source-cited answer
  1. 01 Authenticate Lawyer opens the application and authenticates against the firm’s directory.
  2. 02 Scope The AI loads the user’s permissions and scopes accessible files, emails, precedents, transcripts and contracts.
  3. 03 Ask “Find the previous supplier dispute we handled for Client X and summarize the strategy we used.”
  4. 04 Retrieve & cite The AI retrieves the relevant documents, cites the exact source files, summarizes the prior strategy, and proposes next actions.
  5. 05 Verify The lawyer clicks any citation to open the original source document. The human stays in the loop on the final work product.
[ 01c2 - The interface ]

What the lawyer sees.

bilbs.firm.local · internal only
B
Bilbs · firm memory Scope: M&A · Construction · 2018–2024

How did Me Tremblay usually structure acquisition clauses for construction disputes between 2018 and 2022?

Across 14 construction-dispute acquisitions Me Tremblay handled in that window, three patterns recur: (1) a layered indemnity cap (8% / 15% / 30% by claim class), (2) a separate construction-defect basket with a 24-month survival period, and (3) a holdback escrow funded at closing rather than letter-of-credit.

Ask the firm’s memory…
SPA-Beauvais-2021-v3.docx DMS · iManage · Matter 21-0419
Open source
CLAUSE 7.4, INDEMNIFICATION CAP (CONSTRUCTION DEFECTS)

7.4.1, The Vendor’s aggregate liability under this Article 7 shall not exceed eight percent (8%) of the Purchase Price for claims arising from breaches of representations relating to general matters…

7.4.2, Notwithstanding Section 7.4.1, the Vendor’s aggregate liability for claims arising under Section 4.18 (Construction Defects) shall not exceed fifteen percent (15%) of the Purchase Price, and shall be subject to a separate basket of $250,000 with a survival period of twenty-four (24) months from Closing.

7.4.3, Claims arising under Section 4.21 (Environmental Liabilities) shall be capped at thirty percent (30%) of the Purchase Price, with the holdback established under Section 2.7 serving as the first source of recourse…

Logged · audit row #00471-A
On-prem only
Cited · no answer without source
SSO · RBAC at retrieval
Every query logged
[ 01c3 - Overlay, not replace ]

Not an ERP. The intelligence layer on top of one.

Clio · Actionstep · ProLaw Practice management stays the source of truth. We read from it; we don’t replace it. Time entry, billing, and conflicts checks keep running where they already run.
iManage · NetDocuments · SharePoint · file servers Documents are indexed in place. No migration. The DMS your firm spent years tuning is still the system of record, Bilbs reads it, cites it, never copies it out.
Outlook · Gmail (local archives) Email archives are indexed for retrieval and search. The mailbox keeps living in M365 or Workspace, Bilbs adds queryability without touching the inbox itself.
PDFs · Word · scanned documents OCR (Tesseract / PaddleOCR) and the embedding pipeline handle every format. The scanned 1998 settlement letter becomes as searchable as last week’s memo.
Active Directory · Okta · Entra ID SSO is your existing directory. RBAC permissions follow the same matter-level access rules your DMS already enforces. No second password, no second permission model.

Why this matters commercially. Law firms strongly resist migrations, retraining, and system replacement. Selling “AI on top of what you already have” collapses the objection set, shortens the sales cycle, and delivers value within weeks instead of quarters. ERP-style modules, billing, conflicts, knowledge management, can be developed later, once the intelligence layer is entrenched.

[ 01d - Why now ]

Three forces, all converging at once.

The window is narrowing. The firms that act now will define the standard their competitors are measured against. The ones that wait keep partner expertise locked in PDFs, watch Loi 25 exposure grow, and pay the research-hour tax every month.

[ 02 - Pick a size ]

Sized to the firm.

[ One line on the invoice ] From $99 / lawyer / month.

Starts at $99 per lawyer per month. One line on the partnership’s invoice. It goes up only if the firm chooses additional services, fine-tuning on a niche practice area, high-volume transcription, multi-office sync, expanded storage. The hardware is not on that line: we audit the firm and either use the server you already have, or we source and install one for you if you don’t have IT, your call after the audit.

Start with the audit
01

We audit the firm.

Document system, practice management, identity directory, network, and the GPU situation, if any. We tell you what your firm needs to run a private AI, in plain English. Free, on the first call.

02

Path A · you have a server.

If the firm already has GPU-capable hardware in the server room (or budget approved through your usual IT channel), we deploy onto it. The firm keeps the asset on its books. $99 / lawyer / month covers the rest.

03

Path B · you don’t.

No IT director? No server room yet? We source the hardware, install it on-site, configure the network, and own the runbook. Hardware sits on a separate, transparent quote, your call once you see the spec. Then $99 / lawyer / month.

Typical fit · 10–30 lawyers
Practice Desktop · water-cooled
10–30
Lawyers, comfortably

The hardware reference for most of the firms we work with. Sits in your own server room, yours if you have one, sourced and installed by us if you don’t. Two NVIDIA RTX 5090 graphics cards, a Threadripper PRO processor, 256 GB of error-correcting memory. Trained on every contract, memo, and matter your firm has handled.

On the partnership’s invoice
from $99 / lawyer / month
One line. Goes up only if you add services.
Audit, deployment, training, updates & support Included
Hardware (yours, or we source it) Separate quote
Transparent per-lawyer pricing, on your own server
See the Practice spec

Not sure which? A 20-minute call with the managing partner and IT director is enough to scope it. The tier names map to hardware references, not invoice lines. Once the audit is done, you tell us whether you already have a server we can use, or whether we should source and install one for the firm, the per-lawyer line stays the same either way. If we source it, it’s a separate, transparent quote against the OEM’s catalogue: we don’t mark up the GPU. Hardware carries the OEM’s 3-year warranty; we shepherd any RMA.

[ What each tier actually handles ]
Capacity dimension Foundation Practice Firm National
Lawyers (comfortable) 5–10 10–30 30–100 100–1,500
Concurrent users (peak) 5–15 25–60 200–250 1,200–1,500+
Indexed corpus 5M+ docs 25M+ docs 100M+ docs Multi-office · cross-office sync
Live transcription streams 2 streams 6 streams 16+ streams Unlimited (per-node)
Redundancy posture RAID 1 · UPS RAID 10 · dual PSU Hot-swap · dual NIC Hot-spare server · multi-node failover
Deployment Single office Single office 1–2 offices Hybrid · per-office nodes + sync

Numbers above are comfortable envelopes, not theoretical maxima. We size against your firm’s actual corpus, peak-hour user count, and meeting load, not a glossy datasheet. If the firm outgrows the chassis, we swap to the bigger spec and re-train on the new hardware over a weekend; the per-lawyer line stays the same.

[ What’s in the $99 / lawyer / month ]
Day 0, audit + deploy No upfront fee
Included

Firm audit, infrastructure review, on-site installation, indexing of your existing documents, identity directory wiring. Two on-site training sessions per practice group. Before $99 starts ticking, everything works.

Every month, run it $99 / lawyer / mo
Included

Updates, model refresh on new open-weight releases, security patches, monitoring, encrypted backups, audit logging, private Slack / Teams with IT, <4h response, 24/7 Sev-1 pager. The line goes up only if the firm adds services below.

Hardware path Separate quote, your call
Optional

We use the server the firm already owns if it’s GPU-capable. If the firm has no IT or no hardware yet, we source it on a separate, transparent quote, at OEM cost, with the OEM’s 3-year warranty, no GPU markup.

Everything that lets the firm answer a client AI questionnaire sits in the $99 line. The only thing it does not cover is the physical box itself, because half the firms we work with already have one in the rack, and the ones that don’t deserve to see the hardware quote on its own page.

Portable by design

Firm outgrows its tier? We swap the chassis for the difference in list price, not a full rebuy, and re-train on the new hardware over a weekend. The model, the data, the runbook all stay with the firm - no re-platforming fee, ever.

[ 03 - What the firm does with it on day one ]

Six things your associates do day one

[ 04 - Who it’s for ]

Three firms on the call this quarter

[ Not a fit: ] Under 10 lawyers · “Can we just use a public chatbot” firms with no confidentiality stakes · No IT staff or MSP
[ 05 - What the firm receives ]

The deliverable, itemised

Deployed on your infrastructure, your own hardware on-premise or your AWS Bedrock account, reachable from every desk through SSO.
Your firm’s documents, precedents, and playbook, indexed and (on local deployments) fine-tuned into a model that is versioned and yours to keep.
The web app, admin console, and training harness. MIT-licensed to the firm. If we disappear tomorrow, IT keeps operating it.
Every prompt, every response, every source citation - logged. Exportable, reviewable, and ready for a vendor questionnaire.
30–50 pages, written for IT. How to deploy, patch, back up, and swap models. A diagram the managing partner can hand to a client.
Two sessions with associates, one with partners, one with IT. Then private Slack / Teams, <4h response for 90 days. Afterwards the firm is self-sufficient by design.
[ 06 - For the IT director ]

The architecture

Reasoning · embeddings · OCR · speech
  • Gemma 3 / Gemma 4
  • BGE-M3 / Nomic Embed
  • Tesseract / PaddleOCR
  • Whisper (self-hosted)
  • Firm LoRA
Sits on top of what you already use
  • Clio · Actionstep · ProLaw
  • iManage · NetDocuments
  • SharePoint · Microsoft 365
  • Outlook · Gmail archives
  • Active Directory · SSO
Retrieval · storage · runtime
  • Qdrant / FAISS
  • LangChain / LlamaIndex
  • FastAPI · encrypted Postgres
  • BIZON chassis · NVIDIA GPUs
  • Docker · Prometheus
Permissions · audit · sovereignty
  • SSO / SAML
  • RBAC enforced at retrieval
  • Full audit log of every query
  • Signed binaries · immutable snapshots
  • No outbound network · air-gap option
[ Risk · mitigation · on the same page ] What a partner will ask before signing

Every failure mode, already answered.

Drive failure RAID 1 or RAID 10 redundancy on every storage volume. Hot-swap drives on Firm and National tiers.
Power outage UPS with graceful shutdown. Optional generator integration on the National tier.
Disaster recovery Local encrypted backups with off-site rotation, controlled by the firm. Keys never leave the firm.
Ransomware Immutable snapshots and an air-gapped backup tier the encryption-malware can’t reach.
User abuse Full audit log of every query, file access, and AI response. Exportable for client questionnaires.
Permission abuse Role-based access control enforced inside the retrieval layer, not bolted on at the UI.
AI data leakage Architectural: no external network access from inference nodes. The model literally cannot phone home.
Hardware failure On-site spare components covered under the support SLA. RMA shepherded by us, not your IT.

All client data, embeddings, and model artifacts remain encrypted at rest. The firm owns the hardware, the data, and the encryption keys. We don’t hold a copy of any of the three.

[ 07 - How it rolls out ]

Typically nine weeks, associates on day one

01 Week 1–2

Free 45-minute call

A first call with the managing partner. A working session with your IT director. A written plan you can take to the partnership. Nothing is ordered until you sign it.

02 Weeks 3–5

It learns your firm

Your IT director gives us secure access to the document system. The AI reads every contract, memo, and matter your firm has handled, and learns how the firm writes. Your data is never used to train anyone’s models.

03 Weeks 6–7

We install the server

The hardware arrives in a flight case. We rack it in your server room with your IT director. We wire it to the firm’s sign-on, the document system, and the practice management software. Tested before any lawyer sees it.

04 Weeks 8–9

Pilot group, then everyone

One practice group tries it first, usually corporate or litigation. We run two training sessions with the lawyers and one with admin. When the pilot group signs off, the rest of the firm rolls in. Billing and time entry stay exactly as they are.

[ The pattern · already proven ]

We’re new. In-house AI isn’t.

Bilbs is a small company. In-house AI is not a small idea. The institutions with the strictest confidentiality rules on the planet, JPMorgan, Morgan Stanley, Bloomberg, Apple, already run their own AI on their own hardware, trained on their own files. They chose private AI because they couldn’t defend any other answer. The question for a Québec law firm is no longer whether this is possible. It’s who installs it, at a price the partnership can sign.

JPMorgan Chase 2024
230,000
employees · in-house LLM Suite

JPMC built LLM Suite entirely in-house because banking-secrecy and data-privacy obligations made external LLMs impossible. The same confidentiality logic applies to solicitor-client privilege - and to Loi 25.

Source · The Digital Banker
Morgan Stanley 2024
98%
advisor adoption · 16k users

AI @ Morgan Stanley Assistant lives behind the firewall, trained on a 100,000-document internal corpus. Advisors find what they need in seconds - the same pattern that makes a lawyer find the 2017 memo in seconds.

Source · Morgan Stanley press
Bloomberg 2023
363B
tokens · proprietary corpus

BloombergGPT - a 50B-parameter model trained on 40 years of the firm's proprietary financial data. The landmark paper proving a domain-specific, in-house LLM beats off-the-shelf on the tasks that matter to you.

Source · arXiv 2303.17564
Klarna 2024
700 FTE
workload absorbed by one AI

Klarna's in-house AI agent handles millions of conversations monthly - the work of 700 full-time agents, with customer-satisfaction scores on par with humans. Customer service moved from cost centre to line-item savings.

Source · Klarna / industry coverage
Meta 2023–2024
50k+
engineers · internal code LLM

CodeCompose / Metamate is Meta's internal AI coding assistant, trained on their monorepo and used by every engineer. Built in-house precisely because third-party code assistants couldn't see the codebase.

Source · Meta Engineering
Apple 2024
On-device
by default · Private Cloud Compute

Apple Intelligence runs most AI on the device itself; anything that can't is routed to Apple-owned Private Cloud Compute. Not a bolt-on to OpenAI - a deliberate architecture where the weights stay with the user.

Source · Apple Security

Every one of these institutions chose private AI, because their confidentiality obligations made no other answer defensible. Your firm answers to the same kind of obligations.

[ Run the math · a firm of 80 lawyers ]

The return is arithmetic.

Hours saved · per lawyer / week
0 h
Drafting, summarising, review
Payback · at $400 avg rate
0
Weeks of recovered billable time
Loi 25 exposure · avoided
$0
Maximum fine per serious breach
3-yr TCO · Firm tier, 80 lawyers
$0k
80 lawyers × $99 / mo × 36 mo = $285,120 over 3 years · one transparent line, on your own infrastructure · hardware billed separately at cost
Payback ladder · first-year subscription recovered in billable time
Firm size
Hours saved / yr
Recoverable value*
Payback
30 lawyers
6,300 h
$2,520,000
14 days
60 lawyers
12,600 h
$5,040,000
7 days
80 lawyers
16,800 h
$6,720,000
5 days
150 lawyers
31,500 h
$12,600,000
< 1 week
300 lawyers
63,000 h
$25,200,000
< 1 week
Client data sent to outside servers
0

Nothing the lawyers type, ask, or get back ever leaves the office. The next client questionnaire about “where is our data processed” becomes a one-page answer.

Outside companies seeing your data
0

Not OpenAI. Not Microsoft. Not Google. Not Anthropic. Not Bilbs. Loi 25’s cross-border transfer rules don’t apply to data that never leaves your office.

Surprise price hikes from vendors
0

Your subscription is locked in at $99 / lawyer / month for the first 36 months, no surprise hikes, no per-token surcharges. Add services later only if you choose to.

* Hours saved is an estimate of 4.2 h/lawyer/week across drafting, summarising, document review, and research, your firm’s actual figure replaces it during the audit. Recoverable value is the optimistic ceiling: it assumes every saved hour is reconverted into billable time at an illustrative $400/hr blended rate, before your realization rate (utilization, write-downs) is applied. Loi 25 fine figure is the statutory maximum administrative penalty (Art. 90.12). Full methodology in the .

Junior associates
1–3 h / day

Saved on first-pass drafting, precedent retrieval, and summaries from the DMS - the work the firm currently writes off in junior billables.

Senior lawyers
30–120 min / day

Saved on contract summarisation, internal precedent search across thirty years of matter memory, and knowledge retrieval that didn’t exist before.

Paralegals & admin
2–4 h / day

Saved on intake automation, draft generation, document review checklists, and the administrative support layer that runs the firm.

[ The elevator pitch ]

We help law firms deploy a private AI server that keeps confidential client data inside the firm while giving every lawyer instant access to the firm’s collective knowledge. Instead of unmanaged AI usage across ChatGPT and other public tools, we centralize AI securely, with governance, permissions, an audit log, and integrations designed for the way law firms actually work.

Bilbs AI · a private AI server for Québec law firms · Montréal-based

[ The problem ]

Your associates are already using AI. The firm is not protected.

The question isn’t whether your associates will use AI. They already do. The question is whether the firm is protected, and whether the managing partner has an answer ready the next time a client, a regulator, or a journalist asks.

[ 08 - Long-term vision ]

A private operating system for institutional intelligence.

Québec law firms are the entry market because they share the hardest version of one structural problem, highly sensitive data, decades of institutional knowledge trapped in unstructured files, growing regulatory pressure, and no acceptable cloud AI path. The same architecture, security posture, and commercial model translate directly to other regulated, high-trust industries. The roadmap is on the wall.

Entry market
Law firms

Québec, then francophone Canada and broader Canada.

Vertical 2
Medical · dental

Clinics under professional secrecy and Loi 25 health-data rules.

Vertical 3
Accounting · audit

Working papers, client files, retention obligations.

Vertical 4
Wealth · family offices

Private wealth managers and multi-family offices.

Vertical 5
Insurance brokers

Policy archives, claims histories, underwriting memory.

Vertical 6
Public sector

Municipal and provincial departments with sovereign-data mandates.

We’re not building an ERP. We’re building the private operating system for institutional intelligence in regulated industries. Law firms come first because the constraint is hardest there: Loi 25, professional secrecy, and decades of partner judgment locked inside PDFs and inboxes. Every vertical above has the same shape, sensitive data, no acceptable cloud AI path, and accumulated knowledge that walks out the door when a senior leaves.

[ 08b - Pilot program ]

A limited cohort of Québec firms.

Each cohort is intentionally small so deployments overlap only on our time, not the firm’s. The structure is the same every quarter, five steps from the first call to the day the AI is live for the firm.

01

Discovery call

20 minutes, free. The managing partner and the IT director on one call. We listen, we ask, we tell you whether the fit is real.

02

Needs analysis

A short infrastructure review of the firm’s document system, practice management, identity directory, and network. Written assessment in your inbox.

03

On-prem deployment

Server racked in your office. Controlled indexing of existing documents, no migration, the files stay where they are. Permissions wired to your directory.

04

Onboarding

Staff onboarding and permissions configuration. Two sessions per practice group, on-site. The firm’s policy becomes something the system can enforce.

05

Feedback loop

Continuous feedback during the pilot window. We optimize on what the firm’s lawyers actually do with it. The platform learns the firm; we learn the firm.

Reasons to be in this cohort

The firms that join the early cohorts get the lowest deployment friction, the most engineering attention, and the right to shape the roadmap. The market is starting to divide, between firms that operationalize AI internally and firms that don’t. We’re taking a handful of partner firms per quarter, and after that the calendar rolls.