AN Alpesh Nakrani
SolutionsBlogBooksPraiseAbout Work with me ↗
Technology / SaaS · Operating-cost reduction

Permission-aware internal knowledge RAG that saves hours every week.

Answer internal questions with citations across approved sources while preserving source permissions and exposing uncertainty.

◆ human-gateda person approves every consequential action
$15,500
fixed-scope pilot
Specialist opportunity
launch posture
Strong durable demand
market signal
permission-aware-internal-knowledge-rag
// enforce acl before retrieval
input: Permissioned documents and messages
step: search hybrid index
citations: [ source ✓ ]   confidence: 0.93
HUMAN GATEawaiting review →

Nothing is finalized until a human approves it.

Built for
The buyer
CIO, COO, Chief People Officer, Business Unit leader
The champion
Knowledge Management Director, IT Applications leader, Enterprise Search owner
Day-to-day users
Employees across support, sales, operations, engineering and HR

Designed, built, and evaluated by Alpesh Nakrani, VP of Growth at ViitorCloud, 14 years shipping software, writing on AI-Native engineering and evaluation.

Evals-first
built in from day one
Human-gated
judgment stays with you
The problem

Where the time and money actually go.

Employees search across Drive, Confluence, Notion, Slack, SharePoint, and ticket systems; stale or inaccessible answers create repeated work and leakage risk.

Who feels it

Employees across support, sales, operations, engineering and HR

Trigger to act: Onboarding is slow, internal questions repeat, acquisitions fragment knowledge, or shadow AI is accessing ungoverned documents.

Outcome & ROI

The result you can model before you sign.

Illustrative, replace with your data
$23,815
per month, illustrative

Illustrative only: 500 employees × 12 minutes/week saved × $55 loaded hourly cost × 4.33 ÷ 60 = $23,815 monthly capacity. Productivity benefit requires adoption and task-based validation.

The outcome, plainly: Answer internal questions with citations across approved sources while preserving source permissions and exposing uncertainty.

Answer grounding
Citation correctness
Permission-leak rate
How it works

Inputs in. A cited, review-ready result out. Your expert decides.

A Permission-aware RAG copilot. Every material fact is grounded in an allowed source and returned with its identifier, with no invented data.

01
Enforce ACL before retrieval
02
Search hybrid index
03
Rerank evidence
04
Answer with citations
05
Expose stale/conflicting sources
06
Request clarification
07
Route content gap to owner
Reference architecturegrounded · human-in-the-loop · fully auditable
Source systems · scoped access
Identity provider/SSO
Drive/SharePoint/Confluence/Notion
Slack/Teams
Source ACLs
Vector/search index
Grounded reasoning core
Retrieve & extract
grounded on your sources, returns citations
Reason & draft
Claude Sonnet 4.6 or GPT-5.6 Terra
Human gateSource owners resolve conflicts; users remain accountable for decisions; HR/legal/security content can require additional approval or remain excluded.
Action · only after approval
Route content gap to owner
Audit trace
sources, rules, confidence, reviewer
Tenant isolation
minimum data, never cross-tenant
Evaluation suite
baselined pre-launch, watched after
Observability
cost, latency & drift telemetry
Model strategy

Claude Sonnet 4.6 or GPT-5.6 Terra for complex grounded work; select by task-level evaluation; Gemini 2.5 Flash, GPT-5.4 mini or Claude Haiku 4.5 for high-volume routing and drafting. PostgreSQL + pgvector or managed vector store; policy rules and evaluator service.

Inputs
  • Permissioned documents and messages
  • Source metadata
  • Ownership/freshness
  • User identity and groups
  • Question
  • Feedback
The human gate

AI-Native, not autonomous. Judgment stays with your people.

The machine does the work; the human’s role narrows to the one thing that matters, judgment. That constraint is what makes it safe to deploy.

Non-negotiable human gate

Source owners resolve conflicts; users remain accountable for decisions; HR/legal/security content can require additional approval or remain excluded.

What it will never do
No bypass of source ACLs
No cross-tenant retrieval
No claim that a generated answer replaces source-of-truth review
No ingestion of private channels without authorization
The scorecard

A scorecard, not a demo. We baseline what breaks in production.

Every deployment ships with an evaluation suite. These are the numbers we baseline before launch and monitor after.

Primary
Answer grounding
Citation correctness
Permission-leak rate
Task completion
Search time
Unanswered question
Stale-source detection
User trust/adoption
Why this, not that

The category is crowded. Most of it isn’t built for your workflow.

The alternatives
GleanMicrosoft CopilotGoogle Gemini EnterpriseMoveworksGuruCoveoElasticCustom RAG platforms
This implementation

Fixed-scope, tuned to your systems and rules, grounded in your data, with the human gate and audit trail built in from day one. A price you own, not a subscription you rent.

✓ Fixed price, not a seat subscription ✓ Grounded in your data & rules ✓ Human approval on consequential actions ✓ Auditable decision trace
Systems & integrations

It plugs into the stack you already run.

No rip-and-replace. Access is scoped to the minimum data necessary, isolated per tenant, and fully logged.

Identity provider/SSODrive/SharePoint/Confluence/NotionSlack/TeamsSource ACLsVector/search indexAudit and feedback system
Pricing

Transparent by design. The build price buys the workflow and the proof.

A fixed implementation fee plus a monthly bill that scales with volume and governance. No hidden seats.

Pilot
$15,500
one-time · bounded proof of value
  • One process / scope
  • Live workflow on your data
  • Baseline evaluation suite
  • Measured vs. current process
Most chosen
Production
$36,000
one-time · full deployment
  • Full scope & integration
  • Human-review UI & audit trail
  • Write-back to your systems
  • Production evals & monitoring
Enterprise
$58,000
one-time · multi-entity / regulated
  • Multi-facility rollout
  • Advanced security & compliance
  • Custom control & escalation
  • Dedicated evaluation program
Monthly operating cost

10,000–35,000 grounded questions per month plus indexing and vector search.

$500–4,200
usage (models, OCR, vector, storage)
$2,200/mo
managed evaluation & monitoring

Planning assumptions, not vendor quotations. Your identity provider and other platform licenses are separate and owned by you. Figures confirmed during scoping.

On working with Alpesh
“His vast knowledge of technologies and a natural problem-solving mindset consistently lead us through complex challenges with clarity and confidence.”
AM
Adil Multani
Senior Backend Developer
Why this is safe to try
01Baseline first. We measure your current numbers before we build anything.
02Fixed scope, fixed price. One process in the pilot. No open-ended engagement.
03Expand only if the scorecard earns it. You see the measured result before committing to production.
04Your people stay in control. The human gate means nothing consequential happens without a human’s approval.
FAQ

Questions serious buyers ask.

Does the AI act on its own?

No. Source owners resolve conflicts; users remain accountable for decisions; HR/legal/security content can require additional approval or remain excluded. The system drafts and recommends; a human approves every consequential action. Explicitly excluded: no bypass of source ACLs; no cross-tenant retrieval; no claim that a generated answer replaces source-of-truth review; no ingestion of private channels without authorization.

How do you stop it inventing facts?

Every material claim is grounded in an allowed source record and returned with its source identifier. The system separates observed facts, model inference, and missing information, and routes to a human whenever confidence is low, evidence conflicts, or an adverse outcome is possible.

What does it cost to run each month?

A usage bill of roughly $500–4,200 per month (10,000–35,000 grounded questions per month plus indexing and vector search), plus a $2,200 per month managed retainer for evaluation, monitoring and maintenance. Your existing platform licenses are separate and already yours. Exact figures are confirmed during scoping.

Do we need a ChatGPT or Claude subscription?

No consumer ChatGPT or Claude subscription is required for the production workflow. The client needs an approved API/cloud billing account. Workspace seats are optional for internal prototyping and administrator access.

How is this different from Glean?

Tools like Glean, Microsoft Copilot, and Google Gemini Enterprise are broad platforms you adapt to. This is a fixed-scope implementation tuned to your systems and rules, grounded in your data, with the human gate and audit trail built in, and a transparent price instead of a seat subscription.

How long until it is live, and how do we prove it works?

This is a specialist opportunity. We baseline “Answer grounding” first, then measure against that baseline. You see the scorecard before expanding scope: the evaluation suite ships with the system, not as an afterthought.

Book a scoping call

Bring your real numbers. Leave with a fixed-scope plan.

A 30-minute engineering-led working session, no slideware. You leave with a sized opportunity estimate, a fixed-scope pilot plan, and the integration & human-review path mapped.

VP of Growth at ViitorCloud · senior delivery owner confirmed before paid work

Ask AI about Permission-Aware Internal Knowledge RAG