Dedicated runtime isolation
Each customer receives its own server-side environment rather than operating inside a shared SaaS runtime. This reduces cross-tenant exposure risk and provides stronger workload separation.

AdvisorClaw DDQ
Technical diligence overview for private deployments.
Final Draft v2
A technical diligence draft describing the current AdvisorClaw private deployment model, system architecture, and operating assumptions.
01
AdvisorClaw is a security-aware, advisor-focused AI deployment framework built on a highly customized OpenClaw runtime and delivered on dedicated virtual private servers for individual clients. Rather than placing customer workflows inside a shared multi-tenant AI SaaS environment, AdvisorClaw deploys a private, single-instance operating environment for each customer.
Each environment is preconfigured with advisor-specific skills, tools, memory structures, and workflow logic designed for advisor use cases. This architecture is intentionally different from lightweight AI wrappers, browser-only copilots, and shared hosted AI tools.
AdvisorClaw is designed to give advisory teams a more controlled AI operating environment with:
The result is a more controlled and isolated foundation for deploying AI in advisory settings than many shared, multi-tenant AI application patterns that rely on common application layers and centralized prompt handling.
02
AdvisorClaw is a managed deployment of a customized OpenClaw-based runtime for advisory firms.
Each deployment provisions a dedicated environment that includes:
AdvisorClaw is not positioned as a generic chatbot or note taker. It is designed as a deployed AI work environment that can support supervised multi-step work across advisor workflows.
In practical terms, AdvisorClaw gives a firm a private AI operating environment running on its own server, with capabilities tailored to advisory use cases.
03
3.1 Deployment Model
AdvisorClaw is currently deployed as a dedicated, single-instance environment on a fresh Ubuntu 24.04 virtual private server.
The implemented deployment path provisions:
This architecture is intentionally designed to avoid the risks and limitations of shared multi-tenant AI application patterns.
3.2 Why This Architecture Was Chosen
AdvisorClaw uses dedicated virtual private servers because this architecture provides meaningful operational and security advantages for advisor-facing AI deployments.
Each customer receives its own server-side environment rather than operating inside a shared SaaS runtime. This reduces cross-tenant exposure risk and provides stronger workload separation.
Memory, session artifacts, files, logs, and agent workspaces live inside the customer’s own deployed environment rather than inside a centralized shared application layer.
The environment can be configured to call only approved model vendors and APIs. AdvisorClaw is designed as a controlled execution layer, not a generic public AI front end.
Advisory workflows often require stronger operational boundaries than lightweight AI chat tools provide. A dedicated server model allows tighter control over files, tools, integrations, and workflow configuration.
Each deployment can be tailored with customer-specific skills, workflows, tool access, and model-provider preferences without depending on a one-size-fits-all SaaS architecture.
3.3 Current Provisioning Flow
The current provisioning flow is request-driven and managed. It includes:
04
4.1 High-Level Topology
The current deployed topology is:
Browser
advisor team access
Caddy
reverse proxy
Nerve
AdvisorClaw application layer
OpenClaw Gateway
runtime / agent core
The gateway layer runs behind the public edge and is isolated from direct public exposure. Internal services communicate over loopback within the server.
4.2 Architectural Principles
1. Public edge separation
The public-facing layer is separated from the private runtime. This reduces direct exposure of the core agent runtime and creates a cleaner boundary between internet-facing traffic and internal agent services.
2. Internal runtime isolation
Core runtime services bind to loopback and operate inside the server rather than accepting broad public ingress directly. This helps keep the AI execution layer private to the deployment.
3. Dedicated environment per client
Each customer operates inside its own dedicated instance. This creates cleaner operational boundaries and avoids the risks that come with heavily shared multi-tenant AI runtimes.
4. Tool-governed execution
AdvisorClaw is designed to operate through configured tools, files, memory, and workflows rather than as a raw chat endpoint. That gives the platform a more structured and controllable operating model.
4.3 Runtime Components
4.4 Why This Is More Controlled Than Typical SaaS AI Patterns
Many AI tools used in enterprises today are essentially shared hosted applications sitting on centralized servers, with user prompts and outputs flowing through common application layers. AdvisorClaw differs in a few important ways:
For firms that care about operational control, data boundaries, and workflow-specific AI behavior, this is a materially more controlled architecture than lightweight shared-server AI tooling.
05
5.1 Multi-Agent Structure
AdvisorClaw supports a primary assistant plus specialist roles. The current deployment bundle explicitly configures:
This enables a more structured execution model than a single general-purpose chatbot.
5.2 Execution Model
AdvisorClaw is built to support:
This makes it well suited for research, document-heavy workflows, recurring operational tasks, and advisory support use cases where context continuity matters.
5.3 Why This Matters
A core limitation of many AI tools is that they are session-bound and prompt-bound. AdvisorClaw is designed around persistent operating context, which allows the system to retain continuity, produce durable work artifacts, and work more like a deployed digital operating environment than a transient chat session.
06
6.1 Persistent Workspace Design
Each AdvisorClaw deployment includes a persistent workspace rather than a temporary chat surface. The workspace supports:
6.2 Memory Architecture
In practical customer terms, AdvisorClaw memory is a persistent file-backed structure informed by QMD-oriented patterns. This memory system is intended to support:
This architecture is evolving and is expected to become more sophisticated over time. Future deployments are expected to incorporate richer graph-RAG-style memory architectures for deeper context management and retrieval.
6.3 Customer File Access
Customers can upload and download files into and out of the workspace and session environment. That is an intentional design decision. AdvisorClaw is meant to integrate into real firm workflows, not function as a sealed black box.
The workspace can serve as a live operating layer that interacts with documents, files, and other workflow artifacts.
6.4 Why the File-Based Model Is Strong
The file-based model is a major differentiator because it gives the deployment:
This is fundamentally different from AI tools that only expose ephemeral prompts and outputs.
07
7.1 Open Architecture by Design
AdvisorClaw is designed to be model-provider-flexible. It can interface with a range of LLM APIs and can be configured based on customer preferences, privacy posture, workflow requirements, and vendor policy. This is not a closed-model application. It is a customizable AI operating framework.
7.2 Current Supported Provider Paths
Current deployment paths support direct integration with:
These providers can be configured at deployment time depending on customer requirements and environment settings. The architecture is intentionally designed so that model-provider selection is not rigidly tied to a single vendor or fixed model SKU.
7.3 How Model Privacy Works in Practice
AdvisorClaw is designed so that model-provider privacy characteristics inherit from the underlying API vendors being used in a given deployment. In practical terms:
This gives customers more flexibility to align model usage with their own preferences and vendor requirements.
7.4 Model Governance Advantage
Because AdvisorClaw runs in a dedicated environment, customers have a stronger architectural foundation for controlling:
That is a meaningful advantage over generic AI SaaS products that route all customer activity through a shared application layer.
08
8.1 Planned Self-Hosted Model Path
IDX is developing IDX Intellex, a self-hosted LLM offering intended to become an optional model path for AdvisorClaw deployments. IDX Intellex is based on current open-source frontier model families and is being customized and fine-tuned for financial use cases.
8.2 Intended Value of IDX Intellex for AdvisorClaw Customers
The expected benefits of introducing Telex into the AdvisorClaw stack include:
8.3 Current Status
IDX Intellex should be represented as an upcoming capability rather than a current default deployment baseline.
AdvisorClaw currently supports API-based model-provider integrations, with IDX’s self-hosted IDX Intellex model path expected to become available as an optional deployment enhancement in the coming months.
09
9.1 Security-First Design Principles
AdvisorClaw is built around a security-aware deployment model from the start. The core security advantage is architectural:
This creates a more controlled operational security posture than many shared-server AI offerings.
9.2 Implemented Technical Controls
9.3 Secure Deployment Hygiene
Deployment and image-preparation materials show explicit attention to:
These are meaningful operational controls, especially in an environment where AI tools often grow out of generic cloud app patterns with weaker deployment boundaries.
9.4 Why This Is Strong for the Advisor Market
Advisory firms are often asked to evaluate AI vendors that run shared cloud applications with centralized prompt handling, shared application infrastructure, and broad vendor-side control of runtime behavior. AdvisorClaw offers a different model:
That makes it a strong fit for firms that want AI capability without defaulting to shared SaaS AI architecture.
10
10.1 Data Separation Model
AdvisorClaw has two clear data layers:
Used for intake, deployment administration, and operational tracking.
Stored locally inside each deployed AdvisorClaw environment and including:
This separation helps keep runtime activity associated with the dedicated deployment rather than collapsing everything into a single centralized application data layer.
10.2 Workspace and Session Data
AdvisorClaw is intentionally designed around persistent local runtime state. That includes workspace artifacts, session data, and memory structures that live in the deployed environment.
This supports continuity, inspectability, workflow integration, and local control over working context.
10.3 Model Calls and Data Flow
AdvisorClaw is designed to call approved model vendors through API access. The privacy characteristics of those interactions depend on the specific providers configured for the deployment.
Because AdvisorClaw is open and configurable, customers can shape model-provider usage around their own requirements and preferences.
10.4 File Portability
Customers can move files into and out of the workspace. This allows the deployment to integrate with existing enterprise workflows and document systems rather than trapping work inside a closed product layer.
11
11.1 Current Integration Philosophy
AdvisorClaw is designed for integration rather than lock-in. The platform can work with model-provider APIs, file-based workflows, deployment and control-plane systems, customer-specific skills and tool layers, and enterprise processes that rely on documents, local runtime context, and durable work products.
11.2 Current Evidenced External Systems
11.3 Customer Customization
AdvisorClaw is intended to be highly customizable. That includes the ability to shape:
That openness is a core part of the product design.
12
12.1 AdvisorClaw’s Role
AdvisorClaw is designed for advisor workflows and includes compliance-oriented specialist capability, but its strongest current technical claim is that it provides a more controlled, private, and configurable AI operating environment for advisory use cases.
12.2 What Makes It Attractive for Regulated Environments
AdvisorClaw’s architecture is especially relevant for regulated or sensitive operating environments because it offers:
12.3 Accurate Positioning
The right public positioning is:
This DDQ does not need to overstate certifications to make that case. The architecture itself is already a compelling differentiator.
13
13.1 Current Access Model
Current deployments use authenticated access to the deployed AdvisorClaw environment and token-protected internal gateway configuration. The current private deployment access model is intentionally simple and controlled, aligned with a managed deployment approach.
13.2 Why This Matters
Because each deployment is customer-dedicated, access control can be applied at the deployment level rather than through a broad shared SaaS identity surface. This gives the platform a simpler and cleaner security boundary than products that multiplex large numbers of customers through the same runtime application layer.
14
14.1 Real Deployment Pipeline
AdvisorClaw is not just a concept or front-end shell. The reviewed implementation includes:
14.2 Operational Validation
The deployment flow includes real validation around:
That matters because it means the deployment is built and checked as an operational system, not merely a marketing concept.
14.3 Robustness Story
AdvisorClaw’s robustness comes from a combination of:
These are strong technical foundations for security-aware AI deployment in advisory settings.
15
15.1 Current Rollout Style
AdvisorClaw is currently delivered through a managed private deployment model. That means:
15.2 Why That Is an Advantage at This Stage
For early customers, this approach allows tighter deployment quality, stronger environment shaping, more precise skills and workflow setup, closer alignment with real advisor use cases, and better security hygiene than a rushed self-serve rollout.
16
Founder pricing and packaging are part of the current commercial offering, with deployments positioned as dedicated, high-control AI work environments rather than commodity SaaS seats.
The important technical point is that the product architecture supports that positioning:
That architecture supports premium, high-control positioning relative to more generic AI tooling.
17
AdvisorClaw is a robust, security-aware AI deployment framework for the advisor market. Its technical strength comes from its architecture:
This is the right foundation for firms that want AI capability delivered in a more private, controlled, and customizable form.
AdvisorClaw delivers an advisor-focused OpenClaw framework on dedicated virtual private servers, giving firms a private AI operating environment with persistent memory, advisor-specific skills, configurable model access, and clearer architectural boundaries than typical shared-server AI offerings.
Appendix
A. Deployment topology schematic
Public Edge
browser / operator access
Caddy
reverse proxy + routing
Nerve
private AdvisorClaw application layer
OpenClaw Gateway
agent runtime, sessions, tools
Workspace + Memory
local files, sessions, state
Model Providers
OpenAI / Anthropic
Control Plane
Supabase + request metadata
B. Founder provisioning flow schematic
Next Step
This page presents the current public draft of the AdvisorClaw technical DDQ. Additional architecture, security, privacy, and operating details can be provided during private deployment diligence conversations.