fivefoil Book a call
For businesses that handle sensitive data

What's said here stays here.

Fivefoil audits your security, supplies and sets up hardware that runs AI models inside your own walls, and builds workflows around exactly how your business runs. Your customers' and clients' information never goes to an outside AI company.

Book an assessment See what we do
Cyber auditsLocal AI builds and installsWorkflow analysis and implementation
Cybersecurity
Compliance
Private AI
Automation
Training

Five petals. Five areas of expertise. One team.

Most firms cover one or two of these. Offices that hold sensitive data need all five working together, so we built a team that does.

Cybersecurity

Risk analysis, scans, hardening and backup testing, for businesses without a security team.

Compliance

HIPAA, PCI, the FTC Safeguards Rule, client confidentiality, and the cyber insurance questions that come with them.

Private AI

We supply the hardware, deploy open-source models on it, and install it in your building.

Workflow automation

We map how work moves through your office and automate the slow, repetitive parts.

Training and support

Hands-on staff training, model updates, and a yearly re-check of your security.

Any business with data worth protecting.

We work across industries. A few have stricter rules, and we know those especially well.

Specialty · HIPAA Security Rule

Hospitals and clinics

Every covered entity needs a current security risk analysis. We do it with you, then help you keep protected health information out of public chatbots.

Specialty · ABA Formal Opinion 512

Law firms

Lawyers using AI have to protect client confidences and understand where the data goes. With Fivefoil, it goes nowhere. The AI runs in your office.

Specialty · PHI front desk to chairside

Dental offices

Small teams, busy front desks, lots of patient records. We secure the basics and take paperwork off your staff without sending charts to the cloud.

We also work with
Accounting and financeInsurance agenciesReal estate and titleManufacturingNonprofitsSchools and educationand more
More on who we serve
Three practices, one rose

Secure it. Keep it private. Fit it to the way you work.

Most offices start with an audit. What we find usually points straight to the next two: a private AI of your own, and workflows that put it to work on your real paperwork.

fivefoil audit
Cybersecurity · Compliance

Cyber audits that end with a fix list, written in plain English.

We look at your office the way an attacker would, and the way a regulator would. You get a ranked list of what to fix first, what it costs, and who should do it. If you want, we fix it with you.

  • Security risk analysisMapped to the HIPAA Security Rule and the NIST Cybersecurity Framework 2.0.
  • Outside-in scanWhat your network, website and email look like from the internet.
  • Email and file sharing reviewMicrosoft 365 or Google Workspace settings, sharing links, multi-factor sign-in.
  • Backup and recovery testWe check that you could actually restore after ransomware.
  • Shadow AI checkWhere staff are pasting customer, patient or client details into public chatbots.
  • Ranked fix listA short report your office manager can act on, and a walkthrough meeting.
This is for you if
  • You can't remember your last risk analysis, or you've never had one.
  • An insurer, auditor or big client has started asking security questions.
  • You suspect staff are already using ChatGPT with real names in it.
fivefoil ai
Private AI · Cybersecurity

Your own AI, installed in your building, answering to you.

We supply the hardware, deploy open-source AI models on it, and install it on your network. If you already have capable machines, we can use those instead. It reads your documents, drafts your letters and answers your staff's questions. Nothing you type is sent to an outside AI company, and nothing is used to train anyone else's model.

  • Hardware supplied, or yours usedWe source and configure it, from a single quiet box in a closet to a small server rack.
  • On-site installWe set it up, connect it to your network and lock it down.
  • Connected to your filesPolicies, templates, past letters, procedure manuals. Only what you choose.
  • Who can see whatSign-in, permissions by role, and a log of every question asked.
  • Open-source models we keep currentWe pick, test and update leading open-source models, so you're never stuck on old ones or locked into one vendor.
  • Works when the internet doesn'tIt runs on your network, so an outage upstream doesn't stop it.
This is for you if
  • You want AI, but your data can't leave the building.
  • Your staff already use AI tools and you'd rather give them a safe one.
  • You'd like to own the system outright instead of renting it per seat.
fivefoil workflows
Automation · Training

We learn your exact workflow, then build the AI steps that fit it.

Off-the-shelf AI tools are built for everyone, so they fit no one's office exactly. We sit with your staff, time the work, and find the tasks that eat the most hours. Then we build automations for those specific tasks, test them with your people, and measure the time saved.

  • Workflow walk-throughWe shadow the front desk, the back office and the professionals.
  • Hours mapWhere the time goes, and which tasks are worth automating first.
  • Custom buildsAI steps wired into the software you already use.
  • A person stays in the loopDrafts go to a human for review before anything is sent or filed.
  • Staff trainingShort sessions, written guides, and a person to call.
  • Before and after numbersWe time the task again once the build is live.
Example builds
Clinic
Prior authorization letters

Pulls the diagnosis, history and payer rules, drafts the letter for a clinician to sign.

chart → draft → review → send
Law firm
First-pass document review

Sorts a production by issue and flags privileged pages for an attorney to check.

documents → tags → attorney review
Dental office
Insurance verification

Reads eligibility responses and fills the patient's coverage notes before the visit.

schedule → verify → notes

Three promises behind every engagement.

Security

Locked down from day one.

Every install starts with the same checks we run in an audit. Sign-in, permissions, logging and backups are set before anyone uses it.

Privacy

Your data stays in your building.

The AI runs on hardware you own, on your network. Patient files, client matters and staff questions never pass through an outside AI service.

Custom

Shaped to your exact workflow.

We build around the forms, software and habits your office already has, so your staff don't have to change how they work to use it.

How an engagement runs.

You can stop after any step. Many offices start with the audit alone and come back for the rest.

  1. Audit

    Find and fix the gaps

    Security risk analysis and scans, then we help you close the urgent items first.

  2. Build

    Build your AI

    We supply the hardware and deploy open-source models sized to your office and work.

  3. Install

    Install it on-site

    Set up on your network, locked down, and connected to the files you pick.

  4. Map

    Learn your workflows

    We shadow your staff and find the tasks that take the most hours.

  5. Automate

    Take the busywork off

    Custom AI steps for those tasks, tested with your people.

After launch we stay on: staff training, model updates and a yearly re-check of your security, for as long as you work with us.

Our auditors never grade our own work.

The audit team works separately from the people who install and build. When we review security on a system Fivefoil installed, you can ask for an outside reviewer, and we'll help arrange one.

Questions people ask us first.

Does any of our data leave the building?

For the AI and the workflows, no. They run on hardware in your office. The only outside traffic is software updates, which we review before installing.

Do we need to buy new hardware?

Only if you don't already have something capable. We supply the hardware as part of the install, sized to how many people will use it, and quote it up front. If you have suitable machines, we'll deploy on those. The audit needs nothing new.

Do you only work with healthcare and legal?

No. We work with businesses of every kind. Healthcare, legal and dental have the strictest privacy rules, so we call them out, but anyone with customer data, financial records or trade secrets benefits from the same approach.

How long does an audit take?

Most audits take two to four weeks from kickoff to the walkthrough meeting.

What does it cost?

Every engagement is quoted after a free call, as one fixed price in writing. See how engagements work.

Will you sign a Business Associate Agreement?

Yes. We sign a BAA with healthcare clients before we touch any protected health information.

Why are you called Fivefoil?

A fivefoil is the five-petal rose from old heraldry. For centuries, a rose hung over a meeting room meant everything said beneath it stayed secret. That's where the phrase sub rosa, "under the rose," comes from. We took the rose because keeping your information private is the whole job, and its five petals stand for our five areas of expertise: cybersecurity, compliance, private AI, workflow automation, and training and support.

Start with a free assessment call.

Tell us a little about your business. We'll set up a 30-minute call to talk through your security, where AI could help, and what a first step would look like.

Email hello@fivefoil.ai

We only use this to set up your call.