Skip to content
KhojAI

Your internal enterprise AI platform.

KhojAI puts everything your organisation knows behind one governed front door — browse it, search it, or just ask. Installed in your own environment, and able to run entirely on models you host yourself.

See how it deploys

Deployed on your infrastructure. Not a subscription service.

Read it as

Sabina Rai can open 1 of 6

Branch officer · public clearance

  • Staff Handbook 2026Everyone
  • Withheld documentAbove clearance
  • Withheld documentAbove clearance
  • Withheld documentAbove clearance
  • Withheld documentAbove clearance
  • Withheld documentAbove clearance
  • One access rule across all three surfaces
  • Every read written to the audit trail
What is our single obligor limit, and did the board revise it?
Answer

The single obligor limit is 20% of core capital. It stood at 25% until the 2026 revision of the Credit Policy; the earlier text is retained and marked superseded, so it can be read but is never served as the current position.

  • Credit Policy 2026 — §4.2 Single obligor limitsInternal · v3 current
  • Credit Policy 2024 — §4.2Internal · superseded
2documents matched and were withheld — 1 above your clearance, 1 not shared with you. You can request access without being told what they are.
One access rule across all three surfacesEvery read written to the audit trail

Who can open what, and why.

Clearance sets a ceiling. Grants say what sits beneath it. Pick any square.

Sabina Rai can open 1 of 6

  • Staff Handbook 2026Publicshared with Everyone

    Can open it. Sabina Rai can open it. Staff Handbook 2026 is public, which sits within a public clearance, and it is shared with everyone. Both gates pass.

  • Credit Policy 2026Internalshared with All staff

    Above their clearance. Above Sabina Rai's clearance. Credit Policy 2026 is internal and their ceiling is public. No grant can lift that — an administrator approving a request would be told so before and after the click.

  • HR investigation file — case 09Internalshared with People & Culture

    Above their clearance. Above Sabina Rai's clearance. HR investigation file — case 09 is internal and their ceiling is public. No grant can lift that — an administrator approving a request would be told so before and after the click.

  • Board Credit Committee minuteConfidentialshared with Credit & Risk

    Above their clearance. Above Sabina Rai's clearance. Board Credit Committee minute is confidential and their ceiling is public. No grant can lift that — an administrator approving a request would be told so before and after the click.

  • Exception register — large exposuresConfidentialshared with Credit & Risk

    Above their clearance. Above Sabina Rai's clearance. Exception register — large exposures is confidential and their ceiling is public. No grant can lift that — an administrator approving a request would be told so before and after the click.

  • Supervisory correspondenceRestrictedshared with Executive

    Above their clearance. Above Sabina Rai's clearance. Supervisory correspondence is restricted and their ceiling is public. No grant can lift that — an administrator approving a request would be told so before and after the click.

Can open itAbove their clearanceNot shared with them
Why

Hover or select a square to see which of the two gates decided it. Start with the bottom-left block — the Chief Risk Officer and the two confidential documents.

The Chief Risk Officer has the highest clearance and not the most access. That is the point of two gates: clearance is a ceiling, never a key. Nobody reads a document simply because they rank highly enough — somebody still has to have shared it.

Four steps, none of which anybody configures.

Nobody searching a filing system should have to choose a retrieval algorithm.

  1. Plan

    Read the thread

    A model rewrites the new message into a question that stands on its own, with pronouns and ellipsis resolved. It also decides whether the turn needs a search at all — “summarise that in one line” does not.

    The person typed

    …and what about the Trishuli one?

    Searched for

    Trishuli Hydropower credit memorandum

  2. Shape

    Pick the retrievers

    The form of the question chooses the retrievers and their weights, deterministically. A reference number or a quoted phrase leans on exact matching; a conceptual question inverts it. Nobody sets this in a toolbar.

    BM251.6
    Semantic0.7
    Full text1.0
    Fuzzyoff

    Fuzzy matching joins in only when the precise retrievers come back empty, so a typo can never pollute good results.

  3. Gather

    Run it, inside the rule

    The permission filter runs inside the retrieval query, not as a tidy-up afterwards — so a passage this person may not read is never ranked, never counted, and never seen.

    1. Passages in the corpus
      679
    2. Matched the query
      41
    3. Within this person's reach
      17
    4. Handed to the answer
      9
  4. Ground

    Answer only from those

    The answer is written from those passages and the ones cited earlier in the thread — every one of them re-authorised on this turn. Lower somebody's clearance mid-conversation and what they were shown two turns ago stops being reachable.

    Answer

    The single obligor limit is 20% of core capital1, revised down from 25%2.

    And when asking beats guessing

    “74/75 is a fiscal year in one department and a document reference in another — which did you mean?”

The same four steps run whether somebody types into Search or asks in plain language. Search shows its machinery — filters, per-retriever ranks, candidate counts — because a librarian wants it. Chat hides all of it, behind a panel you can open if you care.

Nothing enters the library unread.

Every stage is shown live in the upload wizard, and every stage leaves a record.

Extract

Text out of the file

  • PDF · 34pp
  • 61,204 characters
Look

Pictures described

  • 9 images
  • 6 described
  • 3 dropped as decoration
Catalogue

Title, summary, type

  • + a proposed classification, with its reasons — confirmed by a person
Split

Passages that keep context

  • 88 passages
  • each carrying its heading path
Index

Four ways at once

  • vectors · BM25 terms · full text · trigrams
Record

One trail

  • 1 document
  • 1 version
  • 1 audit entry

A scan with no text layer still works.Pages with no extractable text are detected and read one by one, down to an amount written in words.

A picture can be the document.An infographic whose service standards exist only as pixels is answerable, with a citation.

A revision supersedes, it does not erase.“What did this say before, and what changed?” keeps an answer.

Your models. Your building.

Five roles, each pointed at its own endpoint. Anything speaking the OpenAI wire format qualifies — so where the thinking happens is a deployment decision, not a rewrite.

Inside your boundary
KhojAIdocuments · index · audit
  • Answering
    Writes the answer people read
  • Drafting
    Titles, summaries, short rewrites
  • Planning
    Decides what to look for, before it looks
  • Reading images
    Scans, photographs, diagrams and figures
  • Indexing
    Turns passages into something searchable by meaning
External endpoint

    No external endpoint in use.

    What crosses the boundary

    Nothing. No document text, no question, no answer and no passage leaves your network.

    Speaks to: vLLM · Ollama · LiteLLM · TGI · Azure OpenAI · AWS Bedrock · OpenAI · Anthropic · OpenRouter · your own endpoint

    नियमAdd-on module

    Checking the rules is a job of its own.

    KhojAI Niyam applies your compliance rules to every record in a system of record and returns a verdict per rule, with the rows that produced it. Licensed separately, for organisations that need it.

    See KhojAI Niyam
    Niyam · review queueCredit file 4,1826 of 6 rules
    • PassExposure within the single obligor limitEXPOSURE, CAP_BASE — 2 rows · 11.4% of core capital
    • FailSecurity valuation dated within the last 12 monthsCOLL_MASTER, VALN — 1 row · valued 2024-11-02, 418 days
    • UnknownBeneficial-ownership declaration on fileBENEF_OWNER — 0 rows returned · not read as absent
    • PassInsurance assignment recorded against the securityINS_POLICY — 1 row · expiry 2026-09-21Action: renew the assignment before 21 Sep
    Request a briefing

    Bring us a real corpus.

    A briefing is a working session, not a slide deck. Tell us what your people are trying to find and what they are not allowed to see.

    • A 45-minute working session. Your access model, your document types, your regulator.
    • A deployment shape on paper. Which roles run where, and what — if anything — leaves your network.
    • A pilot against your own documents, under NDA, configured to your real clearance tiers.

    We use this to prepare the session and to reply. Nothing goes to an advertising network, and we do not add you to a mailing list you did not ask for.