Access control in RAG

How U-KNOW.AI enforces access control, in five points: permission model, check before retrieval, tenant separation, evidence, operating model and legal framework.

  • No second permission model, permissions come from the source systems
  • Permission evaluation per user and per query before the similarity search
  • Per-tenant vector index with separated data, model and key paths
  • Evidence through audit log, source references and deterministic calculation
  • Identical access control in managed, private cloud and on-premises operation
U‑KNOW.AI