Skip to content
AI that respects who can see what

Ask your documents. Get everything you have access to.

One assistant for the whole organisation. Each answer draws on every document that person can open, and nobody has to check first.

Documents
Library
Credit & Risk
33 folders open to you

Your documents, ready to ask about

confidential
AI Assistant
Ask KhojAI
What is our single obligor limit, and does Everest Cement breach it?

Your single obligor limit is 20% of core capital for one borrower.Credit Policy 2026 · §4.2 · p12

Everest Cement's total exposure is 11.4% of core capital, so it sits inside the limit.Credit Memorandum — Everest Cement · exposure summary · p4

Guarantees count towards the same limit, and that figure already includes them.NRB Directive 3/2025 · §2 · p3

Sources
Credit Policy 2026
Credit & Risk / Policies · v3
internal
Credit Memorandum — Everest Cement
Credit & Risk / Files · v1
confidential
NRB Directive 3/2025
Compliance / Circulars · v1
internal

Each statement carries the paragraph it came from.

Governance
Answer record
ANSWER_RECORDED
3 sources cited

Every answer, with what it drew on

internal
Ask in plain language

questions, follow-ups, and an answer in your words

Every answer cites its sources

each statement links to the paragraph it came from

Access decided in the database

the same rule the application uses, enforced where the data lives

Runs on your own servers

your infrastructure, your models, your data

Ask KhojAI

A question in plain language, an answer you can check.

Check any sentence against the passage it came from. Each answer is built from what you can open.

  • Ask the way you would ask a colleague. Follow-ups keep their context, so "and the Trishuli one?" works.
  • Each statement carries the document, section and page it came from.
  • The same question from someone else comes back differently, on their own access.
  • Every answer is written to a record, with its sources, as it is given.
AI Assistant
Ask KhojAI
What is our single obligor limit, and does Everest Cement breach it?

Your single obligor limit is 20% of core capital for one borrower.Credit Policy 2026 · §4.2 · p12

Everest Cement's total exposure is 11.4% of core capital, so it sits inside the limit.Credit Memorandum — Everest Cement · exposure summary · p4

Guarantees count towards the same limit, and that figure already includes them.NRB Directive 3/2025 · §2 · p3

Sources
Credit Policy 2026
Credit & Risk / Policies · v3
internal
Credit Memorandum — Everest Cement
Credit & Risk / Files · v1
confidential
NRB Directive 3/2025
Compliance / Circulars · v1
internal

Each citation sits with the sentence it supports, not in a footnote at the end.

Access control

The access your people already have, applied to every answer.

Two things decide it. A clearance tier sets sensitivity; a grant opens the folder. Applied before the assistant reads anything.

  • Written once. The application, the search and the database all use that same rule.
  • It runs inside the search itself, so the assistant only ever sees what that person can open.
  • Nothing beyond someone's access reaches the model, so no clever prompt can talk it into more.
  • Tests run on every change to prove browse, search and ask all agree.
Administration
People & Access
Access matrix · Payroll & Compensation
Rita Shrestha · CEO
not shared with her
restricted
Sita Gautam · HR Manager
granted the folder
restricted
Barsha Subedi · administrator
may grant it · cannot read it
internal

Identical clearance, opposite outcome. Clearance is a ceiling, never a key.

Search and retrieval

How the assistant finds the right paragraph.

Meaning, keywords and exact wording, searched together. Nobody picks a mode — you can still search it yourself.

  • Finds the paragraph, with its section and page, not just the file.
  • Wording you half-remember still finds it. Type it with four typos and it comes back first.
  • Text read from a scan says so, and names its page.
  • Results tell you how many more documents cover the topic, so you know what to ask access for.
Discover
Search
single obligor limit core capital
Credit Policy 2026
Credit & Risk / Policies · §4.2 Single obligor limits · p12
internal
NRB Directive 3/2025 — Single Obligor Limits
Compliance / Circulars · §2 Computation of exposure · p3
internal
3 withheld · 3 above your clearance

Type it with four typos and it still comes back first.

On the record

Every answer keeps its own evidence.

Who asked, what they could see, and every source the answer drew on — written as it happens, not reconstructed.

Every read and every answer, written down.

  • Reads, downloads, searches, questions, permission changes, emergency access — every kind of event.
  • Nothing is ever edited or removed. People with history are suspended, not deleted.
  • Filter to refusals and "who looked at this" takes seconds.
Audit Log · denials
ACCESS_DENIED
Kiran Magar — AML Compliance Report, above clearance
11:31
BREAK_GLASS
Barsha Subedi — reason recorded · owner notified
08:12
GRANT_LAPSE
external auditor grant ended on schedule
00:01
Deployment

Runs on your infrastructure, with your models.

Each model role points at its own endpoint. Where the thinking happens is a setting.

  • Roles: chat, fast, planner, vision, embedding. vLLM, Ollama, LiteLLM, OpenRouter or your own.
  • Move the answering model in-house first. Changing the index model means a rebuild, and a mismatch is refused.
  • PostgreSQL. Argon2id passwords, and sessions you can revoke instantly.
  • In production it refuses to start rather than run insecurely.

Deployed on your infrastructure. Not a subscription service.

Deployment
Model roles
CHAT
http://gpu-box:8000/v1 · vLLM
in-house
VISION
http://gpu-box:8000/v1 · same endpoint
in-house
EMBED
text-embedding-3-large · 1536 dims
hosted

Each role is set separately. Only the embedding role costs a rebuild.

Managing documents

The document side is the simple part.

Upload a file and it is ready to ask about in minutes.

KhojAI
Himalaya Federal Bank
Rajeev Pandey · Credit Analyst
Clearance confidential · member
33 of 82 documents
Documents
Library
confidential
33 of 82 documents · Credit & Risk
Policy
Credit Policy 2026
internalv3
Credit Memo
Credit Memorandum — Everest Cement
confidentialv1
Guide
Remittance Product Guide
publicv2
Report
Non-Performing Loan Ratio by Quarter
confidentialv1
49 documents in these folders are not shown — above your clearance
The application

Every screen your team works in.

Twelve screens. Your menu shows the ones your role uses.

Documents

Library

Folders you can open. Each document shows its classification.

Discover

Search

Search everything you can open, and see how many more documents cover the topic.

AI Assistant

Ask KhojAI

Ask in plain language. Each answer is drawn from what you can open.

Ingestion

Upload

Every stage runs in the open. A person confirms the proposed classification.

Administrators only

Administration

People & Access

Clearance tiers and folder grants in one place, with the access requests they produce.

Administration

Invitations

Invite somebody with a clearance and their grants. No mail relay? The link comes back to you.

Administrators only

Governance

Audit Log

Every kind of event, with who did it and when.

Governance

Answer Records

Every answer leaves a record you can cite.

Governance

Retention

The schedule proposes, a separate person approves. Legal hold outranks both.

Administrators only

Governance

Recertification

Proof that access is still right, folder by folder.

Governance

Attestations

Proof that a policy was read, person by person.

Administration

Settings

Mail and security for the installation. Changes apply on the next request.

System administrators only

Document ingestion

What happens when you upload a document.

Every stage is shown live, and every stage leaves a record. No overnight batch.

01

Text out of the file

PDF, Word, Excel, PowerPoint, CSV, Markdown, images.

02

Pictures described

A scan with no text is read by a vision model, not skipped.

03

Classification proposed

The model proposes a tier. An administrator confirms it.

By meaning, keyword, full text and spelling — so wording you half-remember still finds it.

Old versions stay searchable but leave everyday results. A revised figure never competes with the one it replaced.

KhojAI Niyam

Checking the rules is a job of its own.

KhojAI Niyam applies your compliance rules to every record and returns a result per rule.

  • Rules are written as plain sentences by the people who own them.
  • Every result carries the rows it was reached from.
  • Licensed as an add-on, for organisations that need it.

See how KhojAI Niyam works

Niyam
Review queue
Credit file 4,182 · 6 of 6 rules
Exposure within the single obligor limit
EXPOSURE, CAP_BASE — 2 rows · 11.4% of core capital
Security valuation dated within the last 12 months
COLL_MASTER, VALN — 1 row · valued 2024-11-02, 418 days
Beneficial-ownership declaration on file
BENEF_OWNER — 0 rows returned · not read as absent
Insurance assignment recorded against the security
INS_POLICY — 1 row · expiry 2026-09-21

Niyam never closes a record. A person decides.

Common questions

Common questions about KhojAI.

Where the system stands today, answered in plain terms.

Does it do SSO or MFA?
Its own accounts today: hashed passwords, instantly revocable sessions, and an identity checked against the database on every request. Adding OIDC or SAML touches one file.
Can it run as more than one replica?
Yes, on shared S3-compatible storage. Local disk keeps you to one server, because an upload lands on whichever machine served it. Downloads always pass through the application, never a temporary direct link.
How does it handle bulk ingestion?
One at a time, as it arrives, with every stage shown live. Bulk loading needs background processing, and that is next.
Can we change the classification tiers?
Yes. Tiers are configuration, not code. Each has a rank, and no two can share one — "higher than" has to mean something. You start with public, internal, confidential and restricted.
Could someone prompt-inject past the access rule?
The rule holds, and not because the prompt is clever. Your clearance goes into the search query itself, so those documents are never put in front of a model.
What happens when someone leaves or changes department?
Permissions come from group membership, recalculated the moment a grant or folder changes. Someone with audit history is suspended, never deleted.

Bring us a real set of documents.

A working session, not a slide deck. Tell us what your people need to find, and we will show you them finding it.

See how access works

A 45-minute working session · a deployment shape on paper · a pilot against your own documents, under NDA.