---
title: "How a Multi-Family Office Made Its Own Documents Answerable"
canonical_url: "https://cognilium.ai/case-studies/family-office-unfunded-commitments-platform"
slug: "family-office-unfunded-commitments-platform"
section: "case-studies"
date_published: "2026-05-22"
date_modified: "2026-06-05"
word_count: 774
author: "Mudassir Marwat"
author_identifier: "0009-0008-1927-2598"
person_same_as:
  - "https://www.linkedin.com/in/mudassir-marwat/"
  - "https://orcid.org/0009-0008-1927-2598"
  - "https://github.com/mudassirmarwat"
  - "https://medium.com/@mudassir-marwat"
  - "https://www.youtube.com/@mudassir-marwat"
  - "https://dev.to/mudassirmarwat"
  - "https://hashnode.com/@mudassirmarwat"
  - "https://huggingface.co/mudassirmarwat"
  - "https://bsky.app/profile/mudassir-marwat.bsky.social"
  - "https://substack.com/@mudassirmarwat"
  - "https://topmate.io/mudassirmarwat"
  - "https://fueler.io/mudassirmarwat"
  - "https://www.instagram.com/mudassirmarwat/"
  - "https://www.facebook.com/mudassir.marwat"
  - "https://www.reddit.com/user/mudassirmarwat/"
  - "https://www.f6s.com/member/mudassir-marwat"
  - "https://cognilium.ai/founder"
entities: []
related: []
---
# How a Multi-Family Office Made Its Own Documents Answerable

A family office's job is to know what a family owns and what it owes. That answer lived across an accounting system, a document drive, a calendar and an inbox — and could only be assembled by a person opening files. Here is how the platform that serves those families made the question answerable without giving anyone access to a second family's data.

## The question a family office exists to answer

Strip away the sophistication and a family office does something simple: it knows what a family owns, what it has committed to, and what falls due. Every other service rests on that being reliably true.

In practice the answer was scattered. Accounting lived in one system, the paperwork that defines the commitments lived in a document drive, dates lived in a calendar, and the context for all of it lived in an inbox. Nothing was missing. It was simply that no one could see it at once.

So the answer to "what do we own through this entity" was not a lookup. It was an afternoon, and its accuracy depended on whoever last read the subscription agreement.

## The number that causes the phone call

Of the questions a family office answers, the one that does damage is unfunded commitments — capital that has been legally committed to a fund or a deal but not yet called. It is not in the bank balance. It does not appear in a profit-and-loss statement. And it is drawn down on someone else's schedule.

An office that can see invested, committed, funded and unfunded in one place is managing liquidity. An office that has to assemble that view from subscription agreements when a call arrives is reacting to it. The same platform view that answers "what do we own" has to answer "what could be asked of us next quarter", or it has answered the easy half of the question.

Adjacent to it sits reconciliation: what the documents say a position is, against what the accounting says it is. Those two drift, quietly, and the drift is only ever found by someone comparing them. Making both readable by the same system is what turns that from an audit exercise into a view.

## Why the paperwork is the hard part

The terms that actually govern a position are written in prose: a private placement memorandum, a subscription agreement, a SAFE, a cap table. They are the authoritative record, and they are unreadable at scale. A person extracting those terms by hand is slow and occasionally wrong, and neither failure announces itself.

So the documents are read automatically and turned into structured records. The effect is not that reading gets faster — it is that a term buried on page forty of a PDF becomes a fact the system can answer with, and can show its source for.

Those facts are then linked: this entity holds this position in this company, evidenced by this document. Ownership questions are rarely one hop deep, and a graph is what makes the second and third hop answerable instead of manual.

## The constraint that shaped everything else

A platform serving several families has one absolute rule: one family's data must never reach another's, under any failure, ever. The comfortable way to guarantee that is to run a separate deployment per client.

It works, and it quietly caps the business. Every improvement ships as many times as you have clients, every client drifts onto a slightly different version, and the cost of serving the tenth family is the same as the first. The economics of software stop applying.

The alternative is to make isolation structural. Each organisation is bound only to the integrations it has actually connected — for that tenant, the others do not exist. All 70-plus endpoints sit behind that boundary, with more than sixty permission scopes across five roles. Cross-tenant access is not something the system detects and blocks; it is something the system has no route to.

## Seven specialists, one question

Underneath, different questions need different competence — financial, legal, document, calendar, correspondence. Exposing that as five tools would push the work back onto the user, who now has to know which one to ask. A router in front of the specialists means a person asks their question and the system decides who answers it.

## What transfers

If you are building software for an industry where each client's data is confidential from every other client's, you will be offered the per-client deployment early, and it will look like the responsible choice. It is worth understanding what it costs before you accept it — not in infrastructure, but in the rate at which you can improve the product for anyone.

The second lesson is about documents. In finance, law and insurance the authoritative record is prose, and most platforms treat it as an attachment — something to store and link to. Everything interesting starts when the contents of that prose become facts the system can reason over, with the document still attached as evidence.

## Frequently asked questions

### What is an unfunded commitment, and why does it matter more than the portfolio value?

It is capital the family has legally committed to a fund or a deal but which has not yet been called. It does not appear in a bank balance and it does not appear in a profit-and-loss statement, so an office that tracks only what it holds is blind to it. The commitment is drawn down on the fund's timetable, not the family's — which is why the number matters for liquidity planning rather than for reporting.

### Our investment documents are inconsistent. Does that break the extraction?

No, and it is the normal case. Private placement memoranda, subscription agreements, SAFEs and cap tables are drafted by different counsel in different decades. Extracted values go into a validation queue rather than straight into the record, so a human confirms anything the system is not confident about. The document stays attached as evidence, so any figure can be traced back to the paragraph it came from.

### How do you guarantee one family's data never reaches another's?

By structure, not by policy. Each client organisation is bound only to the integrations it has actually connected, and every one of the platform's 70-plus endpoints sits behind that boundary, with more than sixty permission scopes across five roles. The system does not detect and block cross-tenant access — there is no route that reaches it. That is a stronger guarantee than a rule someone has to follow.

### Why not just run a separate deployment for each family?

It is the safe-looking answer and it caps the business. Every improvement has to ship as many times as you have clients, each client drifts onto a slightly different version, and serving the tenth family costs what the first did. You keep the isolation and lose the economics of software. Making isolation structural keeps both.

### Does this approach generalise beyond family offices?

The shape does. It applies wherever the authoritative record is prose and each client's data is confidential from every other client's — legal, insurance, private credit, fund administration. The specific vocabulary changes; the two problems do not.

---

Canonical HTML: https://cognilium.ai/case-studies/family-office-unfunded-commitments-platform