Decypher
\n Technologies<\/a> with Annette Garcia-Acosta (pictured below),
\n Decypher’s director of communications. Their conversation focused
\n on what most offices skip: The work that has to happen before the
\n tool is ever turned on.
\n \u00a0
\n<\/p>\n
\n ![\"\"](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/06\/Farr)
\n<\/p>\n
\n Farr Shepherd
\n<\/p>\n
\n ![\"\"](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/06\/Annette)
\n<\/p>\n
\n Annette Garcia-Acosta
\n<\/p>\n
\n The employee who logged out
\n Shepherd opened with a story he tells often.
\n<\/p>\n
\n A family office lost a staff member to a routine departure. A few
\n weeks later, leadership realized that a meaningful chunk of the
\n employee’s work product was missing. It wasn’t in SharePoint, the
\n shared inbox, or on the network drive.
\n<\/p>\n
\n The employee had been running nearly all their work through a
\n personal AI account. Every document, every draft had been created
\n on a platform the office had no access to and no claim on. When
\n the employee logged out for the last time, the work went with
\n them.
\n<\/p>\n
\n The painful part was the lack of recourse. The office had no
\n written policy prohibiting personal AI accounts for work.
\n Technically, no rule had been broken. There was no way to demand
\n the return of work produced that\u00a0the firm had paid for.
\n<\/p>\n
\n This, Shepherd argued, is why a written AI policy is the first
\n step on any adoption roadmap. It is the highest-leverage move a
\n family office can make, and most haven’t made it.
\n<\/p>\n
\n Start narrow
\n Once the policy is in place, Shepherd sees the same mistake
\n almost every time. The new tool gets connected to everything in
\n sight \u2013\u00a0SharePoint, Google Drive, the email archive, the
\n family photo library, the trust documents, the investment memos.
\n<\/p>\n
\n The appeal is obvious. AI promises to lighten workloads and make
\n offices more efficient. But the model can’t tell sensitive
\n material from routine material. It reads whatever it is given
\n access to, and eventually it will read something it shouldn’t.
\n<\/p>\n
\n Shepherd’s recommendation is narrow first, wide later. A pilot of
\n three to five users run for 30\u00a0days, with one mandate: find
\n the holes. What can the tool reach that it shouldn’t? What is
\n showing up in outputs that has no business being in the system?
\n He compared the exercise to a sieve. Find the leaks before the
\n whole organization starts pushing material through.
\n<\/p>\n
\n He flagged free-tier tools as something to ban outright. With
\n most consumer AI products, prompts and uploads can become
\n training data. He pointed to a JP\u00a0Morgan piece from earlier
\n this year describing a family office executive who discovered
\n that an AI model appeared to know intimate details about the
\n family. The trail led back to a family member using a free AI app
\n as a personal therapist. The lesson: enterprise products only.
\n<\/p>\n
\n When the builder is the risk
\n Some family offices have moved past off-the-shelf tools and
\n started building custom AI \u2013\u00a0proprietary models trained on
\n their investment research, operations, and family records. This
\n is a much bigger undertaking, requiring months of work,
\n specialized consultants, purpose-built data lakes, and an
\n architecture outside the office’s normal IT footprint.
\n<\/p>\n
\n In a custom build, Shepherd argued, the consultant introduces
\n more risk than the technology. The family office is handing its
\n data architecture to an outsider, and most offices don’t have the
\n documentation to judge whether that outsider can be trusted with
\n it.
\n<\/p>\n
\n His due diligence centers on questions that force specific
\n answers. Does the vendor have access to the actual data, or is it
\n encrypted and inaccessible to them? What encryption is used, who
\n controls the keys? Can the vendor prevent its own engineers from
\n looking at the data? What happens to the data, and to the trained
\n model, when the engagement ends?
\n<\/p>\n
\n Vague responses are the warning. A consultant who can’t explain
\n their data access controls, or who has no defined deletion
\n procedure, should not be advanced to a contract.
\n<\/p>\n
\n The same scrutiny should extend to the office’s outside advisors.
\n Lawyers, accountants, and consultants all touch sensitive data,
\n and the office usually has no visibility into the AI tools those
\n parties are running. A governance policy that stops at the
\n office’s own staff leaves a much larger group of users entirely
\n unmanaged.
\n<\/p>\n
\n The next wave: agents
\n Shepherd closed by flagging the development he expects to
\n dominate next year’s conversation: agentic AI. Unlike the AI
\n tools most offices have used so far, agents take actions
\n \u2013\u00a0booking flights, moving files, sending payments.
\n<\/p>\n
\n Drop that capability into a family office and the risk
\n multiplies. An agent with access to the inbox, the calendar, and
\n the financial accounts has shifted from reading information to
\n acting on it.
\n<\/p>\n
\n A second risk compounds the first. Agents read email, documents,
\n and web content. If someone hides a malicious instruction inside
\n any of that material \u2013\u00a0and attackers are starting to
\n \u2013\u00a0the agent can be tricked into carrying it out. A wire
\n transfer might look authorized because the agent was deceived
\n into initiating it. A sensitive file might end up where the wrong
\n people can see it.
\n<\/p>\n
\n Two guardrails are non-optional: 1) limit what any agent can
\n reach, so that a mistake or manipulation stays
\n contained,\u00a0and 2) require a human to approve anything
\n involving money, personal data, or sensitive files, with an audit
\n trail behind every action. Most family offices won’t be building
\n agents in-house; they will adopt them from vendors. Which makes
\n the first questions practical. Whose agent is this? Where does it
\n run? What can it reach?
\n<\/p>\n
\n One thing this quarter
\n Asked what a family office should do this quarter if it did
\n nothing else, Shepherd named three workstreams to run in
\n parallel: write the policy, catalog the data and who can reach
\n it, and pilot before scaling.
\n<\/p>\n
\n Each step requires realizing that AI is now part of how the
\n organization operates and treating it accordingly.
\n<\/p>\n
\n The offices that put guardrails in place this year will be in a
\n different position from the ones that wait until something has
\n gone wrong. Shepherd has seen both. The first conversation, he
\n said, is the cheaper one.
\n<\/p>\n
\n Shepherd and Garcia-Acosta developed two checklists discussed
\n during the session\u00a0\u2013 an AI Deployment Readiness Checklist
\n covering governance, configuration, and access controls, and an
\n AI Consultant Vetting Checklist for offices considering a custom
\n build. Both are available on request from Decypher Technologies.
<\/p>\n","protected":false},"excerpt":{"rendered":"One of the takeaways from the fireside chat at this part of the FWR family office cybersecurity forum…\n","protected":false},"author":2,"featured_media":75469,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[24,25,7201,7202,7203,7204,7205,7206,7207,7208,7209,7210,7211,7240,7242,7241,7243,7212,7213,7214,7215,7216,7217,7218,7219,7220,7221,7222,7223,7224,7225,7226,7227,7228,7229,7230,7231,7232,7233,7234,3815,7235,7236,7237,7238,7239],"class_list":["post-75468","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ai","tag-ai","tag-artificial-intelligence","tag-family-office","tag-family-office-news","tag-family-risk","tag-family-risk-news","tag-family-wealth","tag-family-wealth-news","tag-family-wealth-report","tag-high-net-worth","tag-high-net-worth-news","tag-hnw","tag-hnw-news","tag-ifa","tag-ifa-news","tag-independent-financial-advisor","tag-independent-financial-advisor-news","tag-mfo","tag-mfo-news","tag-multi-family-office","tag-multi-family-office-news","tag-private-bank","tag-private-bank-news","tag-private-banking","tag-private-banking-news","tag-private-wealth","tag-private-wealth-news","tag-private-wealth-reporting","tag-registered-investment-advisor","tag-registered-investment-advisor-news","tag-ria","tag-ria-news","tag-sfo","tag-sfo-news","tag-single-family-office","tag-single-family-office-news","tag-uhnw","tag-uhnw-news","tag-ultra-net-worth","tag-ultra-net-worth-news","tag-wealth-management","tag-wealth-management-news","tag-wealth-manager","tag-wealth-manager-news","tag-wealth-planning","tag-wealth-planning-news"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/75468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=75468"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/75468\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/75469"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=75468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=75468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=75468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}