One approved prompt.
Not fifty personal copies.
Versioned review templates standardize the firm's prompts, matter-level budgets keep client billing clean, and an append-only audit trail records every change for the file.
Pass-through gateway · prompts never train Nemo Router · configurable data policy
- All retainedPrompt versionsEvery template revision kept
- 3Budget scopesFirm · matter/team · per-key
- Append-onlyAudit trailEvery action recorded
- ConfigurableData policyDown to zero-content logging
Standardize the review prompt. Keep the history.
A practice group drafts and A/B tests a contract-review prompt, saves the approved version as a server-side template, and every associate runs that exact version. Each revision is retained, every change lands in the append-only audit trail, and the cost of each review bills to the matter team that ran it.
- Server-side templates — no prompt copy lives on a laptop
- Every version retained for rollback and comparison
- A/B test two variants on real matters before adopting one firm-wide
- Matter team budgets make AI cost a clean disbursement line — 402 on a tripped hard cap
Step 01 — draft + version
Approved template saved
Practice group tests variants · every revision retained
Step 02 — run
Associates run the firm version
Cost lands on the matter team budget, per key
Step 03 — record
Audit trail, append-only
Every template change captured with actor and diff
Confidentiality controls on every request
PII redaction runs inline, and a zero-content or metadata-only data policy keeps client content unlogged.
Matter-level budgets
Hard and soft caps per firm, matter team, and key — per-key spend breakdown for client cost recovery.
Encryption + tenant isolation
AES-256 at rest, TLS 1.2+ in transit, and Postgres Row-Level Security isolating every firm and team.
What we can state plainly about your data.
- Nemo Router is a pass-through gateway. Prompts are forwarded to the provider you route to; they are not used to train Nemo Router.
- Content stays out of our logs when you set a zero-content or metadata-only data policy — and PII redaction strips identifiers before a request is forwarded.
- SOC 2 Type II is in progress (target Q3 2026); a DPA is published and signable. We will confirm the provider data-handling terms for the models in your routing config.
Need the DPA and a data-handling walkthrough for a conflicts or risk review? security@nemorouter.ai will take your team through it.
Legal questions, answered
Is client data confidential — and not used to train models?
Nemo Router is a pass-through gateway: prompts are forwarded to the model provider you route to and are not used to train Nemo Router. Training behavior at the provider depends on the provider; we route to enterprise-grade provider endpoints and can confirm the data-handling terms for the providers in your routing config. Within Nemo Router, PII redaction and a zero-content data policy keep client content out of our logs.
Can we stop AI cost from leaking across matters?
Give each matter its own team with a budget. Per-key spend tracking attributes every dollar of inference to the matter that incurred it, so cost flows cleanly into a disbursement line. A hard cap returns 402 the moment it would be breached — useful on a fixed-fee engagement.
How do we keep prompts consistent across the firm?
Build review prompts as server-side templates. Every associate runs the same approved version instead of a personal copy. Templates are versioned, so you can roll back a change or A/B test two variants before adopting one firm-wide — and every change is captured in the audit trail.
Can data stay in a specific jurisdiction?
United States is the default footprint. EU residency is generally available on Enterprise, with the UK, Canada, Australia, Singapore, and India available on request. Customer data is replicated within a single region and is never moved without an explicit migration request.
Standardize review. Bill it to the matter.
We will walk your firm through templates, matter budgets, the data policy, and the audit trail — and confirm the data-handling terms for the providers you route to.
Pass-through gateway · configurable data policy · DPA published · SOC 2 Type II audit in progress (target Q3 2026)