The document platform that never phones home.
OCR, classification, field extraction, hybrid semantic search, and a grounded RAG copilot — engineered on-premises first for organizations whose documents can't leave the building, with pluggable cloud providers when they can.
✓ stack: 100% open components · models: local via vLLM/Ollama
✓ deployment: on-prem first · cloud-pluggable
✓ ip & data: stays inside your boundary
# productized from patterns we shipped repeatedly
What it does
Ingestion & OCR
40+ formats through PaddleOCR and layout models — scans, photos, tables, and multi-language documents normalized into structured content.
Classification & intelligence
Document-type classification, packet splitting, and metadata enrichment — the right pipeline processes the right pages automatically.
Field extraction
Schema-driven extraction with per-field confidence and validation rules; low-confidence items route to human review, corrections feed evals.
Hybrid semantic search
BGE-M3 dense vectors fused with keyword search across the corpus — answers cite page and region, every time.
RAG copilot
Ask your archive questions in natural language; grounded answers from your documents or an honest ‘not found’ — never an invention.
Security & governance
Keycloak SSO, role-based access carried into retrieval, PII detection via Presidio, malware scanning, and immutable audit logs.
Inside the platform
Ingestion (ING)
NATS JetStream event backbone, format normalization, OCR orchestration, and MinIO object storage — built for sustained bulk throughput.
Processing (PRO)
Layout analysis (LayoutLMv3/Donut), table extraction, and enrichment pipelines with per-stage observability.
Classification & Intelligence (CLS)
Type classification, splitting, metadata models — eval-gated, retrainable on your corrections.
Search & Retrieval (SRH)
Qdrant/pgvector + OpenSearch hybrid retrieval with reranking, ACL filtering, and the RAG answer layer.
Platform layer
Keycloak, OpenBao secrets, Prometheus/Grafana/Loki/Tempo observability, MLflow model registry — operations-grade from install.