The questionnaire often only hears “we private-deployed”. Ask which machine and which store hold the model, the vectors, the logs, and the keys — four boxes empty. A loud laptop fan and an open port only prove today’s chat works. Logs still ship to the cloud and sentences in retrieved chunks have already left. Left, the private-deployed pitch will not help. That day the key may still sit in the repo or the chat log.