Start with the whole workflow
A local model is one part of a private system. Document parsing, embeddings, retrieval, prompts, answers, and operational logs all need an explicit location and access policy.
Make the boundary testable
Evaluate the chosen workflow with internet egress blocked. Confirm that the system starts, loads its models, retrieves documents, and produces useful answers. Document any required exceptions.
Keep control after installation
Agree on model updates, encrypted backup ownership, support access, and recovery procedures. Privacy is an operating practice as well as a deployment choice.