[ PUBLIC SECTOR & TOURISM ]

Secure Document Q&A

Compliance and policy archives are large, fragmented, and rarely searched well. The team that needs an answer in the next ten minutes settles for an answer in the next two days. We built a private RAG chatbot that lets staff ask plain-language questions over the archive, returns answers with source citations to the underlying PDFs, and keeps every byte inside the corporate perimeter.

Secure Document Q&A

Client

A national tourism authority in the GCC

Timeline

Production rollout

Role

Internal RAG chatbot delivery

Team

Pod: RAG + frontend

Year

2024

Industry

Public sector and compliance

01

The Challenge

Public-sector and regulated organisations cannot ship document content to public LLM endpoints. The default chatbot architecture violates that constraint on day one.

Search alone is not enough. Staff need answers, not just hits. Answers must show their sources or the room will not trust them.

02

The Solution

Built the retrieval layer on ChromaDB and HuggingFace embeddings, kept entirely inside the customer environment. Generation runs against Gemini Pro with retrieval-augmented prompts, and every response surfaces the source documents and page numbers it drew from.

Shipped a Next.js 16 frontend with streaming responses, a ChatGPT-style conversation surface, document upload and management, and chat history. Operations staff get a familiar interface; security teams get a deployment that respects the perimeter.

[ Impact ]

Local

Vector store and embeddings stay on-prem

Cited

Every answer points to its source PDF and page

Streaming

Real-time response generation

Multi-doc

Conversation spans the full archive

[ Outcomes ]

01

A working internal Q&A surface for the corporate archive, with source citations on every answer.

02

A pattern that ports to other regulated archives: legal, compliance, internal policy, regulator filings.

03

A reference for Sovereign Agentic AI delivery in the GCC, where data residency is the brief, not an afterthought.

[ Tech Stack ]

Next.js 16 FastAPI LangChain ChromaDB HuggingFace Embeddings Google Gemini Pro

Ready for your story?

Let's build what's next.

Start a Project