DATA
Anything stored should be understandable, retrievable, and deletable.
PostgreSQL is the system of record. Search and graph indexes are rebuildable projections. Tenant admins can inspect documents, originals, extraction versions, memories, scores, runs, devices, keys, and audit events.
ORIGINALS
The whole file remains.
Byte-exact originals use S3-compatible object storage with checksums, media types, and extraction versions. Authorised users can retrieve or delete them.
EXTRACTION
A better pipeline without another upload.
Improved extraction creates a new version from the original. Reindexing is projected atomically so readers never see a partial version.
MEMORY
Relevant, not permanently in the way.
Memories are classified, deduplicated, and scored. Use raises relevance; time lowers it gradually. Low scores archive rather than auto-delete.
RULES
You decide what may become memory.
Admins configure allowed categories, sources, and blocked terms. The rules apply on direct ingestion and nightly consolidation.
AI
Azure OpenAI in the EU as the primary path.
Internal AI flows are designed for Azure OpenAI in the EU. Customer data is not used to train provider foundation models under the contracted Azure service terms. Provider and model are replaceable per product part.
DELETION
One action with a visible outcome.
Deletion removes the source and original, then queues removal from vector and graph projections. Admins can follow the status.