Platform Features

Vector + BM25 ranked lists merged with Reciprocal Rank Fusion. Neither approach alone — both working together.

Top-N candidates jointly scored against the raw query by a cross-encoder model. The most accurate, most expensive step applied last.

S3-native columnar vector store with sub-100ms ANN retrieval. Tiered abstraction separates the embedding provider from the store.

LanceDB built-in FTS keeps keyword and vector search in the same store. Zero extra infrastructure.

Structural heuristics detect Native, Scanned, and Sandwich PDFs automatically — choosing the optimal extraction path per document.

In-process OCR via tesseract.js. Page-level rasterization pipeline with progressive status reporting. Force OCR override available.

DOCX, PPTX, XLSX, ODT and legacy formats (.doc, .xls). Embedded images extracted and OCR-processed separately.

Ingestion runs in Node.js Worker Threads (or BullMQ in Enterprise). Zero UI blocking. Auto-classification included in the async pass.

Answers stream token-by-token to the browser via Server-Sent Events. No waiting for the full response before reading begins.

Every answer links back to the exact document, page, and passage used. Click to jump directly to the source.

Connect Local (WASM), Ollama, or Cloud LLMs. Embedding provider is independently configurable from the chat LLM.

High-Water Mark: documents are locked to the highest severity between user-declared and AI-assessed classification. Irreversible downgrade protection.

Every vector query is anchored on owner_id. Creators always have access even if no explicit sharing exists. Hard-filter at the engine level.

Vector ACL filter at retrieval + relational permission cross-check before delivery. Two independent layers, both must pass.

Document downloads use authenticated pre-signed S3 URLs with a strict 60-second TTL. No long-lived access tokens.

All secrets encrypted at rest in S3 using AES-GCM, derived from the operator's master passphrase. Decrypted in-memory on boot only.

All nodes report heartbeats every 60 seconds to the shared registry. Ops team sees CPU, memory, uptime, primary/replica status at a glance.

Every share, revoke, classification change, and admin action captured as a high-priority audit event. Immutable append-only log.

All system-wide configuration lives in the relational DB (system_settings table). Nodes cache with a short TTL — no config files on disk.

Users belong to one or more groups with group-scoped roles. Cross-group users are supported. Privacy scoping enforced at every layer.