diff --git a/donna/Donna-Business-Plan.pdf b/donna/Donna-Business-Plan.pdf
index ad9fba7..8562bab 100644
Binary files a/donna/Donna-Business-Plan.pdf and b/donna/Donna-Business-Plan.pdf differ
diff --git a/donna/index.html b/donna/index.html
index d99d57b..a66e10a 100644
--- a/donna/index.html
+++ b/donna/index.html
@@ -223,9 +223,9 @@
   <p>What Dawn uses today becomes what we sell tomorrow: a single pane of glass where one reviewer runs many principals. Per-person buckets (email, calendar, tasks, notes, documents), a review queue ordered by risk tier, an insights page that surfaces patterns (missed sales calls, recurring requests) as proactive suggestions, and one-tap escalation to the principal. Channels meet people where they are: email and calendar natively, iMessage/SMS domestically, WhatsApp for international scale, Teams and call transcription next.</p>
   <h3>Architecture</h3>
   <ul>
-    <li><b>Claude (Anthropic) + Mosaic</b> — frontier reasoning plus instant deploy of servers, sites and apps; the same stack shipped both beta sites and the live application pipeline in days, not months.</li>
+    <li><b>Claude (Anthropic) + Mosaic, then the box</b> — frontier reasoning plus an instant-deploy beta scaffold; the same stack shipped both sites and the live product in days, not months. Production lands on a Fibernetics-operated box in Canada: the migration is two documented seams (database and password auth — everything else is already self-contained; see DEPLOYMENT-BOX.md in the repo).</li>
     <li><b>Model failover</b> — automatic in-family fallback is live today (Opus &rarr; Sonnet on transient failure; a weaker model degrades polish, never safety — everything still passes review). Second-provider and local fallback land in the funded plan.</li>
-    <li><b>Data residency</b> — customer content stays in the Fibernetics environment in Canada; scoped to connected mailboxes; not used to train general models; exported and removed on exit.</li>
+    <li><b>Data residency</b> — production runs on Fibernetics' own hardware in Canada (the final host is a box we operate, not a cloud); the beta scaffold runs on vetted cloud infrastructure under the DPA, stated plainly to customers. Model inference is Anthropic's API until the funded second-provider/local failover lands. Content scoped to connected mailboxes; not used to train general models; exported and removed on exit.</li>
     <li><b>No new portal for customers</b> — Donna works inside the email, calendar, phone and finance tools the customer already runs. The dashboard is for the reviewer.</li>
   </ul>
   <div class="callout"><div class="lab">Working today</div>