Skip to main content
Solutions · Public sector

Public-sector AI that meets security classification
and air-gapped network requirements

Classifies documents as Classified, Sensitive or Open (C · S · O) and handles each level accordingly. Networks with no internet connection use the same installation image, answers are delivered as Hangul (HWPX) documents, and all activity is recorded in a sealed audit log.

Public-sector requirements

Four key points public institutions check

Security classification

Korea's N2SF levels: Classified, Sensitive and Open

Classifies documents as Classified, Sensitive or Open (C · S · O) and allows, labels or blocks each level. Classified documents are left out of results sent to external AI tools by default.

N2SF Model 2 “AI integration system” · IF-14Guardrails
Air-gapped network

Verified air-gapped installation

On a network with external internet access blocked, we verified installation, first-account sign-in, connecting an in-house model, document upload and indexing, search and chat. You need only the installation image files, a license file and the address of your in-house model.

Installation and operations
Hangul (HWP/HWPX) documents

Answers as Hangul (HWPX) files

Chat and harnesses answer with Hangul (HWPX) files and also read HWP files.

Chat and unified agent
Audit and retention

Log retention and tamper evidence

Records requests, guardrail decisions and administrator activity. The audit log is kept indefinitely by default, checked for tampering with a hash chain, and sent to your SIEM over syslog in real time.

National Cybersecurity Basic Guidelines Art. 55 · NIS guidebook M09 · Compensating controls for financial network separationAdministration and audit
Air-gapped installation

What to prepare

  1. Installation image files

    Prepare the installation images as files so that nothing is downloaded from outside during installation. You can also use your company's registry.

  2. License file

    The license is verified from a file, with no connection to an outside server.

  3. In-house model

    Register models you run with Ollama, vLLM, LM Studio, NVIDIA NIM or similar as OpenAI-compatible endpoints.

  4. 2 security keys

    The server starts only when a secret key and an encryption key are provided.

The search dictionaries and the manual are included in the installation image, so they need no separate preparation.

Examples of work done with each harness templateSee workflow demos

See it with
your own documents

In a consultation, we connect a few of your documents so you can check the answer quality for yourself. Send us your questions and our team will get back to you.

Product videosReal product screens · Example company ACME Logistics · 16 videos