Security built for enterprise requirements
It runs on data handling and access control aligned with the NIS N2SF standard.
A summary of the core technology for reviewers and practitioners. Detailed specifications are provided in a separate proposal.
Compliance
The security-tier scheme and access control are designed against the NIS N2SF standard. Internal knowledge stays usable even on an air-gapped network.
Aligned with the NIS N2SF standard
Four security tiers — public, team, organization, confidential — operated against the standard.
Permission filtering at query time
Candidate documents are filtered by the asking user's permissions the moment a query arrives. A document out of reach is never cited as evidence either.
Access history retained
Who opened what is kept in tamper-evident form and wired to the cryptographic verification module.
Personal data collected to answer an inquiry is destroyed once the inquiry is closed. Documents and data provided during onboarding are not used for any purpose beyond what the contract sets out.
The data processing pipeline.
Upload
Bulk-load documents with a security level assigned.
Document parsing
Parsed by 13 format-specific engines.
Chunking
Split into chunks at Korean sentence boundaries.
Semantic conversion
Sentences are converted into retrieval vectors.
Indexing
Semantic and keyword indexes are built at the same time.
Retrieval accuracy and information security are designed at the same layer.
A single query passes through four layers in order. Security level determines the retrieval candidates; the quality gate determines the final answer.
Hybrid retrieval
Unified query across semantic search (vectors) and exact keyword matching (BM25)
Multi-document reasoning across a knowledge graph (GraphRAG)
Re-ranking narrows 50 candidates down to 8 precise ones
RAG-Guard vector security
AES-256-GCM with our own vector transform (SRXT)
Search runs while the data stays encrypted, with no loss of result quality
Per-customer independent encryption keys · processed in a trusted execution environment
Security levels and access control
Four levels — public, department, organization, confidential — aligned to the NIS N2SF standard
Permissions filtered in real time at query time
Tamper-evident retention of access logs · integrated with a cryptographic verification module
Answer quality and safeguards
10-stage quality reinforcement · automatic query expansion (HyDE)
Prompt-injection detection and blocking · automatic de-identification of personal data
Citation verification plus automatic scoring on three answer-quality metrics