AI calls are server-side through a provider abstraction. The assistant searches approved platform content, logs usage, supports moderation and does not expose system prompts or private records.