AdvisorClaw logo

AdvisorClaw DDQ

Technical diligence overview for private deployments.

Final Draft v2

AdvisorClaw Technical DDQ

A technical diligence draft describing the current AdvisorClaw private deployment model, system architecture, and operating assumptions.

01

Executive Summary

AdvisorClaw is a security-aware, advisor-focused AI deployment framework built on a highly customized OpenClaw runtime and delivered on dedicated virtual private servers for individual clients. Rather than placing customer workflows inside a shared multi-tenant AI SaaS environment, AdvisorClaw deploys a private, single-instance operating environment for each customer.

Each environment is preconfigured with advisor-specific skills, tools, memory structures, and workflow logic designed for advisor use cases. This architecture is intentionally different from lightweight AI wrappers, browser-only copilots, and shared hosted AI tools.

AdvisorClaw is designed to give advisory teams a more controlled AI operating environment with:

  • a dedicated server
  • persistent memory and workspace context
  • advisor-specific skills and tools
  • isolated runtime state
  • configurable model-provider access
  • support for integration into existing firm workflows

The result is a more controlled and isolated foundation for deploying AI in advisory settings than many shared, multi-tenant AI application patterns that rely on common application layers and centralized prompt handling.

02

What AdvisorClaw Is

AdvisorClaw is a managed deployment of a customized OpenClaw-based runtime for advisory firms.

Each deployment provisions a dedicated environment that includes:

  • a primary assistant
  • specialist roles for research, portfolio analysis, and compliance-oriented workflows
  • a persistent workspace
  • structured memory
  • local runtime state
  • advisor-specific skills and tools
  • a controlled server-side operating environment

AdvisorClaw is not positioned as a generic chatbot or note taker. It is designed as a deployed AI work environment that can support supervised multi-step work across advisor workflows.

In practical terms, AdvisorClaw gives a firm a private AI operating environment running on its own server, with capabilities tailored to advisory use cases.

03

Deployment Architecture

3.1 Deployment Model

AdvisorClaw is currently deployed as a dedicated, single-instance environment on a fresh Ubuntu 24.04 virtual private server.

The implemented deployment path provisions:

  • a new server
  • the OpenClaw runtime
  • a controlled reverse-proxy edge
  • a private gateway layer
  • a seeded workspace and memory structure
  • advisor-specific skills, tools, and specialist roles
  • deployment validation before the environment is marked ready

This architecture is intentionally designed to avoid the risks and limitations of shared multi-tenant AI application patterns.

3.2 Why This Architecture Was Chosen

AdvisorClaw uses dedicated virtual private servers because this architecture provides meaningful operational and security advantages for advisor-facing AI deployments.

Dedicated runtime isolation

Each customer receives its own server-side environment rather than operating inside a shared SaaS runtime. This reduces cross-tenant exposure risk and provides stronger workload separation.

Stronger control over runtime state

Memory, session artifacts, files, logs, and agent workspaces live inside the customer’s own deployed environment rather than inside a centralized shared application layer.

Tighter control over model access

The environment can be configured to call only approved model vendors and APIs. AdvisorClaw is designed as a controlled execution layer, not a generic public AI front end.

Better fit for sensitive workflows

Advisory workflows often require stronger operational boundaries than lightweight AI chat tools provide. A dedicated server model allows tighter control over files, tools, integrations, and workflow configuration.

Greater customization

Each deployment can be tailored with customer-specific skills, workflows, tool access, and model-provider preferences without depending on a one-size-fits-all SaaS architecture.

3.3 Current Provisioning Flow

The current provisioning flow is request-driven and managed. It includes:

  1. 01
    intake or deployment request
  2. 02
    request persistence in Supabase
  3. 03
    deployment job creation
  4. 04
    VPS provisioning
  5. 05
    secure deployment bundle upload and execution
  6. 06
    runtime and workspace configuration
  7. 07
    validation checks before handoff

04

System Architecture

4.1 High-Level Topology

The current deployed topology is:

Browser

advisor team access

public https/http edge

Caddy

reverse proxy

private app layer

Nerve

AdvisorClaw application layer

loopback

OpenClaw Gateway

runtime / agent core

The gateway layer runs behind the public edge and is isolated from direct public exposure. Internal services communicate over loopback within the server.

4.2 Architectural Principles

1. Public edge separation

The public-facing layer is separated from the private runtime. This reduces direct exposure of the core agent runtime and creates a cleaner boundary between internet-facing traffic and internal agent services.

2. Internal runtime isolation

Core runtime services bind to loopback and operate inside the server rather than accepting broad public ingress directly. This helps keep the AI execution layer private to the deployment.

3. Dedicated environment per client

Each customer operates inside its own dedicated instance. This creates cleaner operational boundaries and avoids the risks that come with heavily shared multi-tenant AI runtimes.

4. Tool-governed execution

AdvisorClaw is designed to operate through configured tools, files, memory, and workflows rather than as a raw chat endpoint. That gives the platform a more structured and controllable operating model.

4.3 Runtime Components

  • a reverse proxy at the public edge
  • the customized AdvisorClaw application layer
  • the OpenClaw runtime/gateway
  • seeded workspaces and memory structures
  • specialist agent workspaces
  • local configuration, logs, and session state

4.4 Why This Is More Controlled Than Typical SaaS AI Patterns

Many AI tools used in enterprises today are essentially shared hosted applications sitting on centralized servers, with user prompts and outputs flowing through common application layers. AdvisorClaw differs in a few important ways:

  • customer runtime state is isolated by deployment
  • files and memory live inside the deployed environment
  • tool access can be tailored per environment
  • model-provider access can be constrained
  • the system is designed around a real operating workspace rather than a single shared chat product

For firms that care about operational control, data boundaries, and workflow-specific AI behavior, this is a materially more controlled architecture than lightweight shared-server AI tooling.

05

Agent Model and Execution

5.1 Multi-Agent Structure

AdvisorClaw supports a primary assistant plus specialist roles. The current deployment bundle explicitly configures:

  • a main advisor-facing assistant
  • a market research specialist
  • a portfolio analysis specialist
  • a compliance-oriented specialist

This enables a more structured execution model than a single general-purpose chatbot.

5.2 Execution Model

AdvisorClaw is built to support:

  • multi-step work
  • structured delegation
  • file-based work products
  • persistent context
  • tool-enabled workflows
  • supervised execution inside a live workspace

This makes it well suited for research, document-heavy workflows, recurring operational tasks, and advisory support use cases where context continuity matters.

5.3 Why This Matters

A core limitation of many AI tools is that they are session-bound and prompt-bound. AdvisorClaw is designed around persistent operating context, which allows the system to retain continuity, produce durable work artifacts, and work more like a deployed digital operating environment than a transient chat session.

06

Workspace, Memory, and File System

6.1 Persistent Workspace Design

Each AdvisorClaw deployment includes a persistent workspace rather than a temporary chat surface. The workspace supports:

  • file-backed work products
  • local memory structures
  • session continuity
  • reusable operating instructions
  • agent-specific directories
  • durable task and context accumulation

6.2 Memory Architecture

In practical customer terms, AdvisorClaw memory is a persistent file-backed structure informed by QMD-oriented patterns. This memory system is intended to support:

  • continuity across sessions
  • accumulation of firm-specific context
  • structured retrieval of prior work
  • persistent operating knowledge inside the deployment

This architecture is evolving and is expected to become more sophisticated over time. Future deployments are expected to incorporate richer graph-RAG-style memory architectures for deeper context management and retrieval.

6.3 Customer File Access

Customers can upload and download files into and out of the workspace and session environment. That is an intentional design decision. AdvisorClaw is meant to integrate into real firm workflows, not function as a sealed black box.

The workspace can serve as a live operating layer that interacts with documents, files, and other workflow artifacts.

6.4 Why the File-Based Model Is Strong

The file-based model is a major differentiator because it gives the deployment:

  • durable memory
  • inspectable state
  • reusable context
  • workflow portability
  • easier integration with enterprise processes and document flows

This is fundamentally different from AI tools that only expose ephemeral prompts and outputs.

07

Model Provider Architecture

7.1 Open Architecture by Design

AdvisorClaw is designed to be model-provider-flexible. It can interface with a range of LLM APIs and can be configured based on customer preferences, privacy posture, workflow requirements, and vendor policy. This is not a closed-model application. It is a customizable AI operating framework.

7.2 Current Supported Provider Paths

Current deployment paths support direct integration with:

  • OpenAI
  • Anthropic

These providers can be configured at deployment time depending on customer requirements and environment settings. The architecture is intentionally designed so that model-provider selection is not rigidly tied to a single vendor or fixed model SKU.

7.3 How Model Privacy Works in Practice

AdvisorClaw is designed so that model-provider privacy characteristics inherit from the underlying API vendors being used in a given deployment. In practical terms:

  • the deployment is configured to call approved model vendors
  • the architecture is intended to minimize unnecessary centralized handling layers
  • the system is open and configurable rather than locked into a proprietary prompt-routing SaaS model

This gives customers more flexibility to align model usage with their own preferences and vendor requirements.

7.4 Model Governance Advantage

Because AdvisorClaw runs in a dedicated environment, customers have a stronger architectural foundation for controlling:

  • which providers are enabled
  • which workflows may call external models
  • how tools and files are made available to the runtime
  • how the deployment is shaped for internal policy requirements

That is a meaningful advantage over generic AI SaaS products that route all customer activity through a shared application layer.

08

IDX and IDX Intellex

8.1 Planned Self-Hosted Model Path

IDX is developing IDX Intellex, a self-hosted LLM offering intended to become an optional model path for AdvisorClaw deployments. IDX Intellex is based on current open-source frontier model families and is being customized and fine-tuned for financial use cases.

8.2 Intended Value of IDX Intellex for AdvisorClaw Customers

The expected benefits of introducing Telex into the AdvisorClaw stack include:

  • lower effective token cost
  • increased processing capacity for high-volume workflows
  • improved economics for document-heavy and research-heavy usage
  • stronger domain alignment for financial reasoning and financial task execution

8.3 Current Status

IDX Intellex should be represented as an upcoming capability rather than a current default deployment baseline.

AdvisorClaw currently supports API-based model-provider integrations, with IDX’s self-hosted IDX Intellex model path expected to become available as an optional deployment enhancement in the coming months.

09

Security Architecture

9.1 Security-First Design Principles

AdvisorClaw is built around a security-aware deployment model from the start. The core security advantage is architectural:

  • each customer receives a dedicated VPS
  • runtime services are isolated inside that server
  • the public edge is separated from the private AI runtime
  • model access is limited to configured vendors
  • workspaces, memory, and files remain inside the deployed environment

This creates a more controlled operational security posture than many shared-server AI offerings.

9.2 Implemented Technical Controls

  • loopback-bound internal runtime services
  • token-protected gateway access
  • password-protected application access
  • generated session secrets
  • allowed-origin and trusted-proxy controls
  • deploy-time secret injection
  • secure deployment webhook authentication
  • validation checks for service health and workspace integrity
  • ownership and permission checks on seeded files and session structures

9.3 Secure Deployment Hygiene

Deployment and image-preparation materials show explicit attention to:

  • secret injection at deploy time
  • sanitization of reusable images
  • avoidance of stale session carryover
  • prevention of customer-specific artifact leakage between deployments
  • backend-auth hygiene during image preparation and cloning

These are meaningful operational controls, especially in an environment where AI tools often grow out of generic cloud app patterns with weaker deployment boundaries.

9.4 Why This Is Strong for the Advisor Market

Advisory firms are often asked to evaluate AI vendors that run shared cloud applications with centralized prompt handling, shared application infrastructure, and broad vendor-side control of runtime behavior. AdvisorClaw offers a different model:

  • dedicated server isolation
  • private runtime state
  • configurable provider access
  • persistent workspaces
  • customer-specific shaping of the environment

That makes it a strong fit for firms that want AI capability without defaulting to shared SaaS AI architecture.

10

Privacy and Data Handling

10.1 Data Separation Model

AdvisorClaw has two clear data layers:

Control-plane data

Used for intake, deployment administration, and operational tracking.

Runtime deployment data

Stored locally inside each deployed AdvisorClaw environment and including:

  • sessions
  • workspace files
  • memory structures
  • logs
  • local runtime state

This separation helps keep runtime activity associated with the dedicated deployment rather than collapsing everything into a single centralized application data layer.

10.2 Workspace and Session Data

AdvisorClaw is intentionally designed around persistent local runtime state. That includes workspace artifacts, session data, and memory structures that live in the deployed environment.

This supports continuity, inspectability, workflow integration, and local control over working context.

10.3 Model Calls and Data Flow

AdvisorClaw is designed to call approved model vendors through API access. The privacy characteristics of those interactions depend on the specific providers configured for the deployment.

Because AdvisorClaw is open and configurable, customers can shape model-provider usage around their own requirements and preferences.

10.4 File Portability

Customers can move files into and out of the workspace. This allows the deployment to integrate with existing enterprise workflows and document systems rather than trapping work inside a closed product layer.

11

Integrations and Extensibility

11.1 Current Integration Philosophy

AdvisorClaw is designed for integration rather than lock-in. The platform can work with model-provider APIs, file-based workflows, deployment and control-plane systems, customer-specific skills and tool layers, and enterprise processes that rely on documents, local runtime context, and durable work products.

11.2 Current Evidenced External Systems

  • DigitalOcean for deployment provisioning
  • Supabase for control-plane persistence
  • OpenAI and Anthropic for model-provider access
  • GitHub-hosted repositories for deployment-time assembly and package retrieval
  • Resend for access-request notification workflows

11.3 Customer Customization

AdvisorClaw is intended to be highly customizable. That includes the ability to shape:

  • model-provider configuration
  • skills and tools
  • memory behavior
  • workflow structure
  • file handling patterns
  • role-specific operating behavior

That openness is a core part of the product design.

12

Compliance-Oriented Positioning

12.1 AdvisorClaw’s Role

AdvisorClaw is designed for advisor workflows and includes compliance-oriented specialist capability, but its strongest current technical claim is that it provides a more controlled, private, and configurable AI operating environment for advisory use cases.

12.2 What Makes It Attractive for Regulated Environments

AdvisorClaw’s architecture is especially relevant for regulated or sensitive operating environments because it offers:

  • dedicated deployment per customer
  • stronger runtime isolation
  • configurable model-provider paths
  • persistent and inspectable workspaces
  • customer-shaped workflow logic
  • better separation from generic shared AI SaaS patterns

12.3 Accurate Positioning

The right public positioning is:

  • security-aware
  • advisor-focused
  • designed for controlled deployment
  • well suited to firms that want stronger architectural boundaries around AI use

This DDQ does not need to overstate certifications to make that case. The architecture itself is already a compelling differentiator.

13

Access Control

13.1 Current Access Model

Current deployments use authenticated access to the deployed AdvisorClaw environment and token-protected internal gateway configuration. The current private deployment access model is intentionally simple and controlled, aligned with a managed deployment approach.

13.2 Why This Matters

Because each deployment is customer-dedicated, access control can be applied at the deployment level rather than through a broad shared SaaS identity surface. This gives the platform a simpler and cleaner security boundary than products that multiplex large numbers of customers through the same runtime application layer.

14

Reliability and Operational Robustness

14.1 Real Deployment Pipeline

AdvisorClaw is not just a concept or front-end shell. The reviewed implementation includes:

  • intake flows
  • request persistence
  • deployment jobs
  • secure provisioning
  • deployment bundle execution
  • seeded runtime/workspace setup
  • deterministic validation checks

14.2 Operational Validation

The deployment flow includes real validation around:

  • service health
  • workspace seeding
  • session bootstrapping
  • configuration correctness
  • artifact presence
  • ownership and permissions
  • edge and loopback checks

That matters because it means the deployment is built and checked as an operational system, not merely a marketing concept.

14.3 Robustness Story

AdvisorClaw’s robustness comes from a combination of:

  • dedicated infrastructure
  • isolated runtime architecture
  • persistent workspace design
  • configurable model-provider access
  • structured deployment validation
  • customer-specific shaping of the environment

These are strong technical foundations for security-aware AI deployment in advisory settings.

15

Founder Deployment Model

15.1 Current Rollout Style

AdvisorClaw is currently delivered through a managed private deployment model. That means:

  • customers apply or request access
  • environments are provisioned intentionally
  • deployments are shaped for the client
  • setup and validation are handled as part of the managed process

15.2 Why That Is an Advantage at This Stage

For early customers, this approach allows tighter deployment quality, stronger environment shaping, more precise skills and workflow setup, closer alignment with real advisor use cases, and better security hygiene than a rushed self-serve rollout.

16

Commercial Positioning

Founder pricing and packaging are part of the current commercial offering, with deployments positioned as dedicated, high-control AI work environments rather than commodity SaaS seats.

The important technical point is that the product architecture supports that positioning:

  • dedicated server
  • private runtime
  • persistent workspace
  • advisor-specific specialization
  • configurable provider and workflow model

That architecture supports premium, high-control positioning relative to more generic AI tooling.

17

Summary

AdvisorClaw is a robust, security-aware AI deployment framework for the advisor market. Its technical strength comes from its architecture:

  • dedicated VPS per customer
  • isolated runtime
  • persistent memory and workspace
  • advisor-focused skills and tools
  • configurable model-provider access
  • more controlled architectural boundaries than shared SaaS AI patterns

This is the right foundation for firms that want AI capability delivered in a more private, controlled, and customizable form.

AdvisorClaw delivers an advisor-focused OpenClaw framework on dedicated virtual private servers, giving firms a private AI operating environment with persistent memory, advisor-specific skills, configurable model access, and clearer architectural boundaries than typical shared-server AI offerings.

Appendix

Reference Schematics

A. Deployment topology schematic

Public Edge

browser / operator access

Caddy

reverse proxy + routing

Nerve

private AdvisorClaw application layer

OpenClaw Gateway

agent runtime, sessions, tools

Workspace + Memory

local files, sessions, state

Model Providers

OpenAI / Anthropic

Control Plane

Supabase + request metadata

B. Founder provisioning flow schematic

Step 1
Access or deployment request submitted
Step 2
Supabase request record created
Step 3
Deployment job queued
Step 4
Runner provisions VPS
Step 5
Deployment bundle uploaded and executed
Step 6
OpenClaw + Nerve + workspace configured
Step 7
Validation checks pass and environment is handed off

Next Step

Request the private deployment diligence package.

This page presents the current public draft of the AdvisorClaw technical DDQ. Additional architecture, security, privacy, and operating details can be provided during private deployment diligence conversations.