Surinch
页面加载中Surinch
页面加载中Safe File Handling for Small Teams
Small teams want to use AI for document analysis, report drafting, and data processing — but they also handle client files, internal documents, and sensitive business data. This checklist helps you safely set up a local AI workbench, classify files before processing, manage model keys, and decide when to stay local versus move to a hosted trial.
The safe starting point is file classification first, processing second. Before any AI tool touches a file, classify it into one of four tiers (public, internal, confidential, regulated). Use customer-managed model keys to control costs and data exposure. Choose local install for any file above public classification. Surinch inchWorker provides a local-first workspace where documents, images, and tables are processed entirely on the user's machine — files never leave local storage, and model keys remain under user control.
Classify every file before processing. The classification determines where and how AI can be used.
Marketing materials, public reports, open-source documentation. Safe for hosted AI services and online trials.
Examples: Blog posts, product pages, public PDFs, open datasets
Team documents, meeting notes, internal process guides. Use locally or with private deployment. Hosted OK only if non-sensitive.
Examples: Internal wikis, team procedures, draft reports without client data
Client data, financials, contracts, source code, business strategy. Local processing only. Never use hosted services.
Examples: Client reports, financial spreadsheets, NDAs, proprietary algorithms
PII, PHI, GDPR-protected data, national security data. Local or private deployment only. Requires additional compliance review.
Examples: Personal data, health records, payment information, legal case files
Your model keys are your cost and data boundary. Manage them carefully.
Always bring your own model provider keys (OpenAI, DeepSeek, etc.). Do not share keys across team members. Each user should have their own key with usage limits.
Configure monthly spending caps at the provider level before connecting keys. Monitor usage weekly during the first month.
Use different keys for development/testing versus production work. This prevents a test loop from consuming production budget.
Store keys in environment variables or secure key managers. Never hardcode keys in scripts, config files, or shared documents.
Are you just learning how the tool works?
Yes -> Use the online trial with official sample data. No -> Continue.
Do your files contain any internal business data?
Yes -> Install locally. No -> Continue.
Do your files contain client or third-party data?
Yes -> Install locally. Online is not appropriate. No -> Continue.
Do your files contain PII, financials, or regulated data?
Yes -> Local install only. Consider private deployment. No -> Online trial or local install, either is acceptable.
Summary: If any file is classified as confidential or regulated, install locally. The online trial is for learning with sample data, not for processing business files.
Yes. The online trial is for learning the tool. When you are ready to process your own files, download and install inchWorker locally. Your learning carries over; your sample data from the trial stays in the trial environment.
Move to InchStack when you need multi-user workflows, shared governance rules, formal approval chains, delivery receipts, or audit evidence that spans multiple people. inchWorker is for individual or small-team local work; InchStack adds the control plane for team governance.
Local processing means files and documents stay on your machine. However, AI model API calls (to OpenAI, DeepSeek, etc.) still require internet unless you are using a fully local model. The key distinction is that your files are not uploaded to Surinch servers.
inchWorker is primarily a single-user local workspace. For team collaboration with permission controls, audit trails, and shared governance, InchStack provides the multi-user control plane. You can start with inchWorker and migrate workflows to InchStack as the team grows.
inchWorker keeps your files local. Your data, your machine, your keys.