Who holds your context?
This memorandum establishes context custody as the first question in any AI tooling decision, before capability and before features. It specifies an ownership test: five questions an Operator should put to any AI vendor in writing before business data moves. It then states the Elevates AI boundary as specification: the context layer is built in the Operator's own workspace, personal operating context is the most the program office ever holds, and the business itself never touches our servers.
The asking has started
AI is useful in proportion to what it knows. A model with no knowledge of your business returns generic work because it is doing generic work. Your AI doesn't know you yet, and every output shows it.
Context closes the gap. Context means the inner workings of the business: strategy, clients, offers, numbers, voice, the reasoning behind your decisions. AI without a context layer is junk food. Access without focus.
Every vendor knows this now. Context is the thing the next generation of AI products will ask you for, and the asking has already started. Connect the inbox. Upload the documents. Sync the pipeline. Grant standing access. Each request sounds reasonable on its own. Together they move the inner workings of your business onto someone else's infrastructure.
The question before tools
Most evaluations ask what the product can do. The evaluation that matters comes first, and it has three parts. Who holds your context. Where does it physically live. What happens to it the day you leave.
A tool can be replaced in an afternoon. Accumulated context cannot. It is the record of how your business actually runs, assembled over months of real decisions. If the three questions above have no clear answers, no feature list compensates.
This is not an argument against the tools. It is an argument about custody, and custody is decided early, by default, in settings nobody reads. Decide it on purpose instead.
The ownership test
Put these questions to any AI vendor before your business goes in. Ask for the answers in writing, before any data moves.
- Can you export everything, today, in a form you can actually use?
- If the vendor disappears tomorrow, does what you built keep working?
- Is your business data on their servers at all, even transiently?
- Who inside the vendor can read it?
- What does leaving cost?
Good answers are specific and short. Vague answers are also an answer. A vendor that has done the engineering can state the boundary in one sentence. A vendor that has not will describe intentions.
Our answer
We state ours as specification. The context layer is built in the Operator's own workspace, on accounts the Operator controls. You own it. You're never locked in. We never hold your data.
The boundary is architectural, not contractual. Personal operating context is the most we ever hold. The business itself never touches our servers. What the Program builds (the Operator, mapped; the business, mapped; the capability, deployed and owned by the Operator) lives in that workspace and stays there, whether or not we are in the room.
The same boundary governs what ships next. If a capability would require receiving business data to function, it does not ship. There is no exception path, because the exception would become the product.
The floor, not a feature
Data sovereignty reads like a line on a comparison chart. It is not a feature, and it is not a preference. It is the floor, and it carries weight in two directions.
First, leverage you do not own is a liability with a login. The day the terms change, the day the company is acquired, the day the export breaks, that leverage answers to someone else. Capability built on borrowed custody is capability on loan.
Second, context compounds. Every mapped decision and captured pattern makes the next piece of work better than the last, which means the value of a context layer grows for as long as it is maintained. Whoever holds the context holds the compounding. That position should be yours.
Lock-in rarely announces itself. It accrues one synced record at a time, until the most valuable asset in the system is the one you cannot take with you. The moment to prevent that is before it starts.
Run the test on every vendor, including us. Context is built, not hoped for. Build it where you own it.