How Pelican protects your information

Your information.
Your intelligence.
Your say.

Security is about more than where a server lives. It is also about who can read a record, what an agent can do, which device can connect and what happens before information leaves.

Sources you chooseFolders and documents you allow
ON YOUR MACYour local model
+ private library
Local processing and record context
Answers with contextAKF checks supported facts against records

An architectural illustration. Your walkthrough should show the actual data flow for the SKU, devices and services you plan to use.

01 / THE LOCAL MODEL

AI close to your records.

Pelican’s local inference runs on the Mac. The selected local model works with the information made available to it, without requiring an outside AI service for everyday local answering. Model choice, memory requirements and response performance depend on the installed configuration.

02 / THE PRIVATE LIBRARY

A defined space for your information.

Choose the folders and documents Pelican may use. Its private library stores sealed records with authenticated encryption, and supported connection credentials use the Mac’s Keychain. Your original files retain their own storage protections; adding a folder does not encrypt the whole computer.

03 / PEOPLE & DEVICES

Access belongs to a role.

Owner, practitioner, front-desk and back-office responsibilities differ. The developed device workflows pair an iPhone or iPad for a particular role: reception intake, a treatment-room screen, a provider’s day or document capture. Pairing and revocation are controlled from the Mac. These are supported companion workflows, not a promise that every feature runs on every device.

04 / AGENTS

Useful help. Visible authority.

Give an agent a job, allowed sources and permissions. Review its proposals, saved plans and activity. Supported shifts can prepare work while Pelican is running under the required conditions. Pause one agent or the whole roster. An agent cannot increase its own authority, and text in a document does not grant it permission.

Sending and financial actions retain their applicable approval or standing-grant controls. Hiring an agent is not permission to send messages, move money or disclose records.

05 / WHAT LEAVES

See the destination before the handoff.

Outbox previews make supported outgoing files, messages and requests reviewable. A standing grant is scoped to a recipient, purpose, limits and duration; it can be revoked. What left records supported transfers. Revocation can stop future use, but cannot retrieve information already sent.

Where enabled, outside AI and business-service connections have their own data flows and permissions. A protected general-method exchange is different from deliberately sharing selected information. Med Spa’s current AI configuration is local; outside AI availability must be confirmed for each SKU.

06 / EVIDENCE & JUDGMENT

Know what a check establishes.

AKF checks supported facts against supplied records. It can expose a mismatch or missing evidence; it does not establish that an original document is true, complete or legally sufficient. Clinical decisions, legal advice and regulatory obligations remain with the responsible professionals.

Questions worth asking

Clear boundaries.
Clear answers.

Does local mean nothing ever connects to the internet?

No. Local inference and approved outside connections are different paths. Email, a business integration or another external service may require a connection and transfer information. Your walkthrough should show what leaves, to whom and under which permission.

Can my phone see everything on the Mac?

A device’s access depends on its pairing, assigned role and the user’s permissions. A reception kiosk or room screen is not intended to expose the owner’s whole workspace. Supported hardware and each enabled workflow are confirmed during installation.

Will an agent send things without asking every time?

Only where an applicable standing grant authorizes that supported action. You define the scope and can revoke it. A new agent starts without a standing sending grant, and changing its general work permission is not itself a sending grant.

Does this website store our practice or property data?

No. This marketing website is separate from the Pelican products. It has no customer-record upload or product login. The contact form only prepares an email draft; keep patient, client and other confidential records out of it.

What should we verify before using Pelican?

Walk through your actual configuration: selected sources, roles, a paired device, an agent proposal, an AKF check and an outgoing handoff. Confirm supported features, device readiness, backup/recovery and your organization’s requirements before relying on the deployment.

See the boundaries in practice.

Bring your questions.
We’ll walk the workflow.

Ask for a private demonstration of the local model, source access, device roles, agent controls and outgoing review.

Request a private demo