Pre-built IPS configurations demonstrating different governance patterns and plan complexities
Each scenario pre-fills every field across all 8 IPS sections — governance structure, investment philosophy, menu design, selection criteria, monitoring framework, fee policy, and participant services. Select a scenario to explore, then customize any field before generating your IPS document.
🔒
Security & Trust Center
Enterprise-grade protection for your retirement plan data
✓
All Systems Secure
Your data is protected with enterprise-grade security and never used for AI training.
🔌 API-First Architecture — Not a Chatbot
IPS(k) connects to Anthropic's enterprise API, not consumer chatbots. When you use "Enhance with Claude AI," your plan metadata is sent via the enterprise API tier — never used for training, never stored in shared conversation logs, and never reviewed by humans. All form data stays in your browser until you explicitly generate a document.
How Your Data is Protected
📝
Form Data
→
🖥️
Browser
→
🔐
TLS 1.3
→
🤖
Claude API
→
📄
IPS Doc
→
🗑️
Auto-Delete
Core Security Features
🚫
Zero Training Guarantee
Anthropic's enterprise API never uses your inputs or outputs to train models. Contractually guaranteed.
🔐
End-to-End Encryption
AES-256 at rest, TLS 1.3 in transit. Data encrypted at every stage between your browser and AI provider.
⏱️
Zero Data Retention
Anthropic offers Zero Data Retention (ZDR). AI queries are processed and immediately discarded — nothing stored.
👁️🗨️
No Human Review
Unlike consumer chatbots, enterprise API data is never reviewed by humans at Anthropic.
Compliance Certifications
🏆
SOC 2Type II Certified
🌐
ISO 27001Information Security
🏥
HIPAABAA Available
🇪🇺
GDPRCompliant
🇺🇸
CCPACompliant
💡 Tip: See the Compliance tab for detailed regulatory alignment information.
IPS(k) uses Anthropic's enterprise Claude API exclusively for the "Enhance with Claude AI" feature. Your plan data is never used for training and has strict retention limits.
Consumer Chatbot vs. Enterprise API
Security Aspect
Consumer Chatbots
Enterprise API (What We Use)
Training on your data
❌ May train on conversations
✓ NEVER trains on your data
Data retention
❌ Stored indefinitely
✓ Zero Data Retention available
Human review
❌ May review for quality
✓ No human review of content
Privacy policies
❌ Consumer privacy terms
✓ Enterprise DPA / BAA available
Compliance
❌ Limited certifications
✓ SOC 2, ISO 27001, HIPAA-ready
Our AI Provider
Claude
Anthropic Claude
Claude Sonnet 4 API
SOC 2 Type IIISO 27001HIPAA
Zero Data Retention (ZDR) option
No training on API data — ever
30-day max retention (without ZDR)
Enterprise DPA available
Used only for optional "Enhance with Claude AI" — local template engine requires no AI
💡 Note: IPS(k)'s built-in "Generate IPS Document" button uses a local template engine that requires no AI at all — your data never leaves the browser. The "Enhance with Claude AI" button is optional and the only feature that calls the Anthropic API.
🔄 How Your Data Flows
Understanding exactly what data is sent where gives you confidence in our security architecture.
IPS(k) Secure Processing Pipeline
📝
Your Inputs
Plan metadata
→
🖥️
Browser
Form fields
🔒→
🤖
Claude API
AI enhancement
🔒→
📄
IPS Document
Generated text
→
💾
Export
HTML / PDF / Word
📦 What Data Is Sent
✅
Plan Metadata Only
Only plan governance choices (plan type, committee structure, fee policy, etc.) are sent to Claude. No participant data, no SSNs, no account balances.
🔐
Encrypted in Transit
All data uses TLS 1.3 encryption between your browser and Anthropic's API endpoint.
🖥️
Browser-Only Processing
All form data, the IPS preview, and export generation (HTML, PDF, Word) happen entirely in your browser. No server stores your inputs.
🗑️
Nothing Stored
IPS(k) has no backend database. When you close the tab, your data is gone. Exports are generated client-side and saved to your device.
⚠️ Important: No files are uploaded. IPS(k) collects plan governance decisions via form fields — no documents, no participant data, no PII. The "Enhance with Claude AI" feature sends only plan metadata (company name, plan type, policy choices).
⚖️ Regulatory Compliance
⚖️
ERISA
Designed for fiduciary compliance. The IPS documents the prudent process for investment selection, monitoring, and fee oversight required by ERISA Sections 402 and 404.
🏛️
DOL Fiduciary Rule
Transparent methodology supports documented, objective investment monitoring processes aligned with DOL's emphasis on procedural prudence.
📋
DOL Cybersecurity
Aligned with DOL's cybersecurity guidance for plan fiduciaries. Encryption, access controls, and no unnecessary data retention.
🇪🇺
GDPR
Data minimization by design. No PII collected. No unnecessary retention. Clear data processing purposes. DPA available from Anthropic.
✅ Security Controls Implemented
🔐 IPS(k) Security Checklist
✓ No PII collected or stored
✓ Encrypted transmission (TLS 1.3)
✓ No AI training on plan data
✓ SOC 2 Type II certified providers
✓ No backend database or server storage
✓ Client-side export generation
📄 Documentation: For fiduciary due diligence, SOC 2 reports are available under NDA from Anthropic's trust center.
❓ Frequently Asked Questions
No. IPS(k) uses Anthropic's enterprise API tier. API data is NOT used to train models. Contractually guaranteed. Additionally, the built-in template engine generates IPS documents without any AI — the Claude enhancement is entirely optional.
IPS(k) has no server-side storage. All form data lives in your browser's memory and is gone when you close the tab. If you use "Enhance with Claude AI," Anthropic offers Zero Data Retention — processed and immediately discarded.
No. Enterprise API data is NOT subject to human review. Only automated systems process the data briefly before deletion.
None. IPS(k) only collects plan-level governance decisions: plan type, committee structure, investment philosophy, fee policy, etc. No participant SSNs, names, balances, or any PII is ever collected, processed, or stored.
A structured prompt containing your plan governance choices — company name, plan type, committee frequency, investment philosophy, fee policy selections, etc. This is plan metadata, not participant data. Claude generates the IPS prose and returns it. The prompt and response are then discarded under Anthropic's retention policy.
Yes. The "Generate IPS Document" button uses a built-in template engine that runs entirely in your browser. No data leaves your device. The "Enhance with Claude AI" button is a separate, optional feature.
Anthropic: SOC 2 Type II, ISO 27001, HIPAA BAA available. Cloudflare (infrastructure): SOC 2 Type II, ISO 27001, PCI DSS Level 1, FedRAMP.