Search that ignores permissions
Index everything into one store without carrying over access rights, and an HR policy question can surface a salary spreadsheet. Permissions have to be enforced per user, at query time.
RAG and knowledge search
We build retrieval systems that find the right passages across SharePoint, Confluence, Google Drive, your CRM and your databases, and answer from them with a citation for every claim — showing each person only what they are already allowed to open, and saying “I don’t know” when the sources do not cover the question.
Why internal search disappoints
Policies, procedures, contracts and past work sit across several systems, in several versions. A chatbot pointed at all of it without care gives fluent answers that are out of date, unsupported or drawn from a document the person should never have seen.
Where cited answers save the most time
RAG pays back where people search the same body of knowledge again and again, and a wrong answer has a cost:
Index everything into one store without carrying over access rights, and an HR policy question can surface a salary spreadsheet. Permissions have to be enforced per user, at query time.
Superseded policies and draft copies sit next to the current ones. Without freshness rules and source ranking, the model quotes whichever version it happens to find first.
Tables cut in half, headings lost, scanned PDFs read as blank pages. Poor parsing and chunking cause more wrong answers than the choice of model does.
Without a set of real questions with known answers, nobody can say whether a change made things better or worse — so quality drifts, and trust goes with it.
What we build
Most of the quality in a RAG system is decided before the model sees anything: how documents are parsed, split, indexed, filtered and ranked. That is where we put the effort.
PDFs, Word files, slides, spreadsheets, scans and web pages parsed with their structure intact — headings, tables and page numbers kept — so citations point somewhere useful.
Keyword and semantic search combined, then re-ranked, so exact terms such as product codes and clause numbers are found as reliably as questions phrased in plain English.
Access rights synced from SharePoint, Google Drive, Confluence or your own application and applied on every query, so each person only retrieves what they could already open.
Each answer links to the exact document, page or section it came from, with the supporting passage on show, so people can check before they rely on it.
Incremental syncs that pick up new, edited and deleted documents, retire superseded versions and record when each source was last indexed.
A set of real questions with agreed answers, scored for retrieval, faithfulness to the sources and correct refusals — run before every change to prompts, chunking or models.
How we work
The same seven stages as all our work, with retrieval-specific steps: a question set before any code, a source inventory with owners, and quality scores at every release.
We collect the questions people actually ask — from inboxes, helpdesk tickets and the team who answer them — and list the sources that hold the answers, who owns each and how often it changes.
A question set and a source inventory
We decide which sources are in scope, how permissions will be enforced, how fresh each index must be, where the data may be processed, and which models fit on cost and data terms.
Scope, permission model and architecture
We design how answers appear: citations, source previews, follow-up questions, feedback buttons, and what the assistant says when it cannot find a supported answer.
Answer and citation design
Two-week sprints: ingestion and parsing first, then search, then answer generation. Each sprint is measured against the question set, so progress is a score rather than an impression.
A working pilot on your own sources
Retrieval scored separately from answers, faithfulness checked claim by claim, permissions tested with accounts at different access levels, and questions the sources deliberately cannot answer.
An answer-quality report
A pilot group first, with feedback captured on every answer. Wrong and unanswered questions go into the test set, and where a source is the cause, it is fixed at the source.
A live pilot with a feedback loop
We monitor sync health, unanswered questions and quality scores, add sources in agreed stages, and re-run the evaluation whenever a model or embedding changes.
Quality tracked release by release
Technology
We are not tied to one vector database or framework. Often the right place for the index is a database you already run.
Sources
Parsing
Search and storage
Models
Access control
Evaluation
If Microsoft 365 Copilot, your intranet’s own search or your helpdesk’s built-in AI already answers your questions well enough, we will say so before proposing a build.
Use cases
Each one answers from a defined set of sources, with citations, for a defined group of people.
Holiday, expenses, benefits and leave questions answered from the current handbook, with the section cited and a route to HR for anything personal.
Service agents type the customer’s question and get the relevant product or policy passage, cited, while the customer is still on the line.
Questionnaire and tender questions matched to previously approved answers, showing where each came from and when it was last signed off.
Engineers search product manuals, release notes and resolved tickets together, so a fix found last year is not worked out again from scratch.
Past advice, templates and know-how notes searched in plain English, restricted by client and matter permissions, with the source document one click away.
Answers over your help centre for your own customers, or over each customer’s own data inside your product — kept strictly separate per account.
Why Techsleight
No inflated numbers — just how we run projects, and what you can hold us to.
We ask what the software is for before we estimate it — and we will tell you when something should not be built, or should be bought instead.
LLM features, retrieval and automation built with evaluation, guardrails and cost controls, and plain software where that is the better answer.
Design, frontend, backend, mobile, cloud and QA in one team, so nothing falls between suppliers.
UK business hours, estimates in pounds, and a contract with a UK company. Our engineers are based in the UK and India.
A fixed-scope project, dedicated developers or a monthly retainer — and you can move between them as the work changes.
Code, IP, cloud accounts and documentation are yours from day one. We sign an NDA before discovery if you need one.
We stay on for fixes, upgrades and new features, or hand over cleanly to your in-house team with the documentation to match.
FAQs
Straight answers on scope, cost, timelines and how we work. If yours is not here, ask us directly.
The system searches your documents for passages relevant to a question, then asks a language model to answer using only those passages and to cite them. The model supplies the wording, not the facts. Answers can therefore be checked, and kept current by updating the documents rather than retraining anything.
We carry the permissions from each source system — SharePoint, Google Drive, Confluence or your own application — into the index, and filter every search by the signed-in user’s access before anything reaches the model. We test it with accounts at different access levels, and re-sync permissions as often as the documents themselves.
The assistant says so. If retrieval finds nothing that clearly supports an answer, it replies that it could not find one, shows what it searched, and points to the right team. Those unanswered questions are logged, because they show exactly where your documentation has gaps.
With a test set of real questions and agreed answers, written with the people who know the subject. We score whether the right passages were retrieved, whether each answer is supported by its citations, and whether the system correctly refuses questions it cannot answer. Every change is re-scored before release, and live feedback adds new questions over time.
Scheduled or event-driven syncs pick up new, edited and deleted documents, so a withdrawn policy stops being quoted soon after it is removed. How fresh each source needs to be is agreed up front — a price list may need hourly updates, a handbook daily — and every answer can show when its source was last indexed.
That is common, and better found early. We rank sources by owner, status and date, exclude drafts and archives where you want them excluded, and surface contradictions rather than blending them into one answer. Where two current documents disagree, the fix belongs with the document owner — the system shows them where to look.
Yes, with the right parsing. Scans go through OCR, tables are extracted with their rows and headers intact, and spreadsheets are indexed in a way that keeps each value with its labels. Numeric questions over large tables are often better answered by querying the data directly, and we build that route in where it applies.
In your own cloud account or database, in a UK or EU region if you need one. Passages sent to a model provider go through their business API, whose data terms we confirm for your chosen provider during design. Where documents must not leave your environment at all, we can run open models in your own infrastructure.
A discovery sprint from £2,000 builds the question set, maps your sources and ends with a fixed-price quote for a pilot. Running costs are hosting for the index plus model and embedding fees, which are paid directly to the provider. We estimate the cost per question during discovery, and it usually depends more on answer length than on the number of documents.
It can sit behind one. RAG is the retrieval and answering engine; a chatbot or voice assistant is one way to put it in front of people. An internal search page, a Teams app, a panel inside your CRM and a customer-facing assistant can all share the same retrieval pipeline and the same permissions.
Start a project
Tell us which systems hold the knowledge, who needs to search it and the questions they ask most. We will tell you what a cited-answer pilot would involve and how we would measure it.
What happens next
Techsleight Labs is a trading name of Krapton IT Consultancy.
Explore