PRIVATE ENTERPRISE AI CHAT

Private Enterprise AI Chat with RAG, Governance, and On-Premise Control

A ChatGPT-class assistant your compliance team can actually approve: retrieval filtered by each user's own permissions, an audit record for every turn, and models that run where you say they run — your data centre, a sovereign region, or an air-gapped enclave.

Deployment

On-premise, sovereign cloud, or air-gapped — your choice

Retrieval

Permission-aware private RAG, indexed inside your perimeter

Evidence

Per-turn audit trail with full retrieval provenance

What is VDF AI Chat?

VDF AI Chat is a private enterprise AI chat platform: a ChatGPT-class conversational assistant in which the language model, the retrieval index, the embeddings, and the conversation history all run inside an organisation's own security perimeter. It combines permission-aware RAG over connected enterprise sources, multi-agent orchestration, and per-turn audit logging, and deploys on-premise, into a sovereign cloud region, or into a fully air-gapped enclave. It is built for organisations that cannot send prompts or documents to an external model provider.

Category
Private enterprise AI chat / governed conversational AI platform
Deployment modes
On-premise, sovereign cloud region, air-gapped
Model support
Qwen, DeepSeek, Mistral, Llama and any OpenAI-compatible endpoint; commercial APIs optional and policy-gated
Retrieval
Private RAG with source-ACL propagation and query-time permission filtering
Connected sources
Confluence, Jira, GitHub, SharePoint/OneDrive, Google Drive, Zoom, uploaded document corpora
Identity
SSO via Google OAuth, Microsoft, and OIDC providers; role-based access per agent and per source
Audit evidence
Append-only per-turn record: identity, agent, model version, retrieved chunk IDs, tool calls; SIEM-exportable
Commercial model
Flat platform licence, unmetered users — not per seat, not per token
Time to governed pilot
Approximately two weeks for a standard on-premise deployment
Regulatory alignment
EU AI Act, GDPR, DORA, NIS2, HIPAA

Evaluating the category rather than the product? Start with private RAG and private enterprise chatbot, or compare deployment modes on private AI.

OVERVIEW

Your AI Workspace, Ready to Work

VDF AI Chat brings real-time multi-agent conversations, AI Network execution, document intelligence, and enterprise integrations into one governed workspace — running on infrastructure you choose, not infrastructure a vendor chooses for you.

  • Real-time chat sessions with full conversation history
  • Permission-aware retrieval across every connected source
  • Multi-phase AI Network orchestration — 8 structured execution stages
  • Agent selection and provider/model management per session
  • HTML artifacts, Mermaid diagrams, code blocks, and voice dictation
  • Google Drive, OneDrive, and file attachment support
  • Jira OAuth, Zoom integration, and enterprise SSO
RETRIEVAL ARCHITECTURE

How Permission-Aware Private RAG Works

The hard problem in enterprise chat is not generating text — it is making sure a user never retrieves a passage from a document they were not allowed to open. Here is the path a single question takes.

1
Ingest with ACLs attached

Connectors pull documents from Confluence, Jira, GitHub, SharePoint, and Drive along with their native access-control lists. The permission model travels with the content instead of being flattened away at index time — the mistake that forces most pilots into a "public documents only" corner.

2
Chunk and embed locally

Documents are split on structural boundaries — headings, sections, code blocks — rather than fixed character counts, so a retrieved passage carries its own context. Embeddings are produced by a model running inside your perimeter. No document text reaches an external API.

3
Filter before you score

At query time the candidate set is narrowed to what the requesting identity may see before similarity ranking runs. Filtering first — rather than ranking first and redacting after — is what prevents a confidential passage from influencing which results surface at all.

4
Ground, cite, and record

The model answers from the retrieved passages with inline citations back to the source document and section. The same turn writes an audit record containing the chunk IDs used, so any answer can be traced to its evidence long after the conversation ends.

5
Re-index on change

Connected sources are re-crawled on a schedule and on webhook events, and permission changes propagate with them. Revoking a user's access in Confluence removes their retrieval reach in chat — no separate deprovisioning step to forget.

Why this matters commercially: hosted assistants keep the retrieval index on the vendor's side, which is why their answers cannot be permission-filtered against systems the vendor does not host. Keeping the index local is what lets VDF AI Chat answer from your entire corpus — including the sensitive part — instead of the subset that was safe to export. See private RAG for the architectural comparison in full.

REFERENCE ARCHITECTURE

Six Layers, One Perimeter

Every layer below runs inside the boundary you define. There is no split-plane design where the control plane phones home — the deployment is self-contained by construction.

Identity & Access
OIDC / SAML SSO, directory sync, role-based access per agent, per model, and per knowledge source. Identity is resolved once and carried through every downstream call.
Chat & Workspace
Session management, conversation history, artifact rendering, voice input, and the agent catalogue. Server-side rendered for fast first load on constrained internal networks.
Orchestration
Agent routing, the eight-phase AI Network pipeline, tool invocation, and sandboxed code execution. Decides which specialist handles a turn and with what tools.
Retrieval
Connectors, chunking, embedding, vector store, and the permission filter. Holds the index and the ACL projection that makes retrieval safe.
Model Serving
GPU-backed inference for open-weight models, with optional routing to commercial endpoints where policy allows. Models are swappable without touching the layers above.
Governance & Audit
Append-only per-turn logging, retention policy, SIEM export, and policy enforcement points that sit in the request path rather than alongside it.

Model serving is deliberately the most replaceable layer. When a better open-weight model ships, swapping it is a configuration change — not a migration. VDF AI Router extends this by routing each request to the cheapest capable model, and the full topology is documented in the on-prem AI reference architecture.

CORE CAPABILITY

Real-Time Chat with Multi-Agent Intelligence

Every conversation is a command center. Create sessions, manage history, and switch agents mid-stream.

Session Management

Create, rename, and group chat sessions. History is organized chronologically — today, yesterday, and older — for instant recall.

Multi-Agent Selection

Choose from YAML-defined or database-sourced agents. Switch the active agent per conversation turn to get the right expertise for the task.

Provider & Model Control

Configure AI provider, model variant, temperature, max_tokens, and top_p directly in the chat UI. No admin portal required.

Voice Dictation

Speak your prompt in any language. Built-in voice input with automatic transcription — hands-free productivity for any workflow.

HTML Artifact Preview

AI-generated HTML renders live in an isolated preview pane. See landing pages, emails, and dashboards instantly — no extra tools needed.

Mermaid Diagrams & Code

Architecture diagrams, flowcharts, and syntax-highlighted code blocks rendered natively. KaTeX math expressions supported.

ORCHESTRATION ENGINE

Eight-Phase AI Network Execution

VDF AI Chat executes AI Networks through a structured 8-phase pipeline — giving you full visibility from problem decomposition to final output.

1
Understand
Parse intent & context
2
Approach
Define strategy & plan
3
Generate
Create initial output
4
Agents
Route to specialists
5
Ready
Validate & confirm
6
Save
Persist state & data
7
Run
Execute the network
8
Format
Deliver final output
VDF AI Network Studio orchestration interface
Network Decomposition

AI Networks break complex goals into coordinated sub-tasks, each routed to the right specialist agent. No manual orchestration required.

Real-Time Status Tracking

Live execution status per phase with agent progress indicators — pending, active, completed, warning, error, cancelled. Full observability throughout.

AGENT MANAGEMENT

Build, Configure, and Deploy Agents

VDF AI Chat connects directly to your agent catalog. Every agent is configurable with custom system prompts, tool sets, and model parameters.

Agent Catalog

Browse YAML-defined and database-stored agents. Search by domain, category, or theme. Select the right agent for every task without leaving the chat.

Multi-Provider Support

Connect OpenAI, Anthropic, Azure OpenAI, or any compatible provider. Switch models per agent independently — no global lock-in.

System Prompt Control

Define and override system prompts per session. Fine-tune agent behavior for specific tasks without leaving the portal.

Tool Assignment

Assign tool sets to agents — web search, code execution, file access — with full visibility into what each agent is capable of doing.

ENTERPRISE INTEGRATIONS

Connect Every Tool Your Team Already Uses

  • File Attachments — Drag-and-drop upload with automatic text extraction
  • Google Drive — OAuth-connected document picker, read directly from Drive
  • Microsoft OneDrive — Microsoft OAuth integration, SharePoint compatible
  • Jira — OAuth integration — create, update, and query issues from chat
  • Zoom — Meeting summaries, transcription, and embedded panels
  • Google OAuth — Workspace SSO login for seamless enterprise access
  • Multiple AI Providers — Pluggable via provider config, swap models any time
Jira
Zoom
Google Drive
OneDrive
GitHub
Google SSO
DEPLOYMENT

Three Ways to Run It — All Under Your Control

Same software, same governance model, same feature set. What changes is where the boundary sits and who owns the hardware inside it.

On-Premise

Your data centre, your hardware, your network.

Model serving, retrieval, and storage all run on infrastructure you own. Commercial model APIs can be disabled entirely so no egress path exists.

Best fit: Regulated enterprises with existing data-centre capacity and procurement control.

On-premise AI platform

Sovereign Cloud

A named region, under a named jurisdiction.

Deployed into an EU, national, or sector-specific cloud region where residency is contractual. Same software, same governance model, no data-centre build-out.

Best fit: Teams that need jurisdictional guarantees without owning hardware.

Private AI deployment modes

Air-Gapped

No outbound network path at all.

Models, images, and updates arrive by controlled offline transfer. Nothing in the runtime requires internet reachability, including model serving and license validation.

Best fit: Defence, classified environments, and OT networks under NIS2 segmentation rules.

Air-gapped enterprise chatbot

Open-weight models are the default. Qwen, DeepSeek, Mistral, and Llama families all run well on a single well-specified GPU node and remove the third-party inference dependency entirely. Commercial endpoints stay available where policy permits them — enabled per agent, never globally assumed. Compare the economics on flat pricing vs pay-as-you-go.

GOVERNANCE

Obligations Mapped to Actual Controls

Compliance claims are only useful when they name the mechanism behind them. Each row below pairs a specific obligation with the control that satisfies it.

Regulatory obligations and the VDF AI Chat controls that address them
Framework Obligation Control in VDF AI Chat
EU AI Act Article 12 record-keeping and Article 13 transparency for high-risk systems. Per-turn immutable logs capturing identity, model version, retrieved sources, and tool calls — exportable as conformity evidence.
GDPR Article 44 restrictions on transfers outside the EEA. No prompt, document, or embedding leaves the deployment boundary. Residency is a deployment property, not a contractual promise.
DORA ICT third-party risk and concentration limits for financial entities. Self-hosted model serving removes the critical-provider dependency. Model swap is a config change, not a re-procurement.
NIS2 Network segmentation and supply-chain security for essential entities. Air-gapped deployment runs with no outbound path; OT-adjacent installs sit inside the segmented zone.

Control documentation, subprocessor posture, and security questionnaire responses are collected in the VDF.AI Trust Center. Procurement teams building an evaluation can start from the enterprise AI RFP checklist.

ENTERPRISE-READY

Workspace Management Built for Enterprise Scale

Dashboard & Metrics

Usage dashboards with session counts, agent performance, and team activity. Productivity insights at a glance.

Team Management

Invite teammates, manage roles, and assign agent access per user or department. Company profile and team hierarchy support.

Per-Turn Audit Trail

Every turn writes an append-only record — identity, agent, model version, retrieved chunk IDs, tool calls. Exportable to your SIEM under your own retention policy.

DOMPurify Security

All user-generated and AI-generated HTML is sanitized before rendering. XSS protection is built in — not bolted on.

OAuth & SSO

Google OAuth, Jira OAuth, and extensible SSO support. Enterprise identity providers and role-based access control built in.

SSR & Performance

Server-side rendering for faster initial load and SEO. Monaco Editor for professional in-browser code editing without plugins.

DIFFERENTIATION

Against the Three Real Alternatives

Enterprise chat evaluations rarely come down to feature checklists. They come down to where inference runs, what it costs at full rollout, and whether you can change the model later.

VDF AI Chat compared with hosted assistants and DIY open-source stacks
  VDF AI Chat Hosted assistantsChatGPT Enterprise, M365 Copilot, Glean DIY open-sourceLangChain, Open WebUI, in-house
Where inference runs Your perimeter — on-prem, sovereign region, or air-gapped Vendor's cloud, vendor's region Your perimeter
Retrieval index location Local vector store, permission-filtered at query time Vendor-hosted index over vendor-connected sources Local, but ACL propagation is yours to build
Model choice Any open-weight or OpenAI-compatible model, swappable per agent Vendor's model, on the vendor's upgrade schedule Fully open — and fully your integration burden
Commercial model Flat platform fee, unmetered users Per seat, per month, plus token overages Free licence, staffed engineering cost
Audit evidence Per-turn identity, model version, and retrieval provenance Tenant-level admin logs; retrieval provenance rarely exposed Whatever you instrument yourself
Time to first governed pilot ~2 weeks Days — governance review is the long pole 3–9 months of platform engineering

The honest summary: hosted assistants win on time-to-first-answer, DIY wins on licence cost, and VDF AI Chat wins when the governing constraint is that data cannot leave the perimeter and the rollout is company-wide rather than a pilot. Detailed teardowns: ChatGPT alternative, Microsoft Copilot alternative, Glean alternative.

IMPLEMENTATION

What the First Eight Weeks Contain

A governed pilot is reachable in about two weeks. What follows is source onboarding and permission mapping — the parts paced by your estate, not by the platform.

Week 1
Infrastructure & model serving

GPU nodes provisioned, inference stack deployed, base model selected and benchmarked against your task mix. Vector store and application database stood up.

Week 2
Identity & first knowledge source

SSO and directory integration wired in, role model mapped, and the first source (usually Confluence or a document corpus) indexed with its ACLs intact. Pilot group goes live.

Weeks 3–4
Agents & source expansion

Department agents configured with their own prompts, tool sets, and model parameters. Jira, GitHub, and file-share sources onboarded and permission-mapped.

Weeks 5–8
Governance & rollout

Audit export piped to your SIEM, retention policy applied, answer quality reviewed against a held-out question set, and access widened department by department.

Indicative infrastructure sizing

Indicative hardware sizing for VDF AI Chat deployments
Scale GPU Supporting nodes Typical model class
Pilot — 50–200 users 1 × 48–80 GB (L40S / A100 / H100) 2 CPU nodes: application, vector store, database 7B–14B open-weight, quantised
Department — 200–1,000 users 2 × 80 GB, load balanced 3–4 CPU nodes with replicated storage 14B–32B open-weight
Enterprise — 1,000+ users 4+ × 80 GB across failure domains HA cluster with dedicated index tier 32B–70B, or mixed via model routing

Figures are planning estimates for typical enterprise concurrency, where only a small fraction of licensed users are mid-generation at any moment. Actual requirements depend on context length, concurrency profile, and quantisation — sizing is confirmed against your own workload during scoping. Retrieval and embedding rarely justify dedicated GPU capacity. Model economics are broken down in the on-premise LLM cost comparison.

TECHNOLOGY

Built on a Modern Foundation

VDF AI Chat is engineered with enterprise-grade technology choices — not prototype-quality tools.

Angular 18 Material Design Monaco Editor Mermaid.js D3.js KaTeX ReactFlow marked DOMPurify Angular SSR
8
Execution Phases
Structured AI network pipeline from intent to output
10+
AI Providers
Connect any OpenAI-compatible model or provider
100%
Inside Your Perimeter
Prompts, documents, embeddings, and logs stay in your boundary
USE CASES

Who Uses VDF AI Chat?

Development Teams
  • Generate, review, and refactor code with AI assistance
  • Create architecture diagrams with Mermaid in seconds
  • Use Monaco Editor for professional in-browser editing
  • Create and update Jira tickets directly from chat
Product Managers
  • Orchestrate backlog refinement with AI Networks
  • Summarize Zoom meeting transcripts instantly
  • Draft user stories and acceptance criteria with AI
  • Create Jira epics and issues from chat context
Content & Marketing Teams
  • Generate HTML landing pages and email templates live
  • Dictate briefs and copy with voice input in any language
  • Access Google Drive documents directly in chat
  • Create visual diagrams and infographics with Mermaid
Enterprise IT Teams
  • Centrally manage agents, providers, and model configs
  • Monitor usage dashboards and team activity
  • Configure Google OAuth and Jira SSO for the org
  • Role-based access control for sensitive agents
FAQ

Questions Buying Committees Actually Ask

What is private enterprise AI chat?

Private enterprise AI chat is a ChatGPT-style assistant where the language model, document retrieval, embeddings, and conversation history all run inside your organisation's perimeter. No prompts, no documents, and no embeddings are sent to an external model provider. VDF AI Chat ships this as a turn-key product with multi-agent orchestration, RAG, code generation, and integrations to Jira, Zoom, and Google/OneDrive — deployable on-premise, in a sovereign cloud region, or fully air-gapped.

How is private RAG different from cloud RAG?

Cloud RAG (used by ChatGPT Enterprise, Microsoft Copilot, and most hosted assistants) sends document chunks to a third-party model provider on every query. That creates data residency, IP-leakage, and procurement issues for regulated teams. Private RAG keeps the embedding model, vector database, and generation step inside your environment, so confidential documents never leave the perimeter. VDF AI Chat's RAG layer is private by default: documents are chunked, embedded, and indexed locally, and retrieval is filtered by the requesting user's own permissions before anything reaches the model.

Which language models can VDF AI Chat run?

Open-weight models served inside your perimeter — Qwen, DeepSeek, Mistral, and Llama families are the common choices — plus any OpenAI-compatible endpoint. Commercial APIs such as OpenAI, Anthropic, and Azure OpenAI can be enabled per agent where policy allows, and disabled entirely in on-premise and air-gapped deployments. Model choice is a per-agent setting, so a public-data agent and a confidential-data agent can run on different models under different policies within the same workspace.

How does VDF AI Chat enforce document permissions?

Retrieval is permission-aware rather than index-wide. Each connected source — Confluence, Jira, GitHub, SharePoint/OneDrive, Google Drive, or an uploaded corpus — carries its source ACLs into the index, and every query is filtered against the requesting user's identity before candidate chunks are scored. A user cannot retrieve a passage from a document they could not open directly in the source system, which is the failure mode that stalls most enterprise chat rollouts.

What does an audit trail look like?

Every turn writes an append-only record: the requesting identity, the agent and model version used, the retrieved chunk IDs with their source documents, any tool calls made, and the response returned. Because retrieval provenance is captured per turn, you can reconstruct exactly which source passages produced a given answer months later. Logs are exportable to your SIEM and are retained in storage you control, under your own retention policy.

How long does a deployment take?

A standard on-premise deployment reaches a working pilot in roughly two weeks: infrastructure and model serving in week one, identity integration and the first indexed knowledge sources in week two. Broader rollout is paced by source onboarding and permission mapping rather than by the platform itself — each additional connected system typically adds days, not weeks. Air-gapped installations add time for the offline model and image transfer.

What hardware does an on-premise deployment need?

A departmental pilot of 50–200 users runs on a single GPU node — a 48–80 GB card such as an L40S, A100, or H100 — serving a mid-size open-weight model, alongside modest CPU nodes for the application, vector store, and database. Production deployments in the 1,000+ user range typically run two to four GPU nodes behind a load balancer for redundancy and concurrency headroom. Retrieval and embedding workloads are far cheaper than generation and usually need no dedicated GPU.

How does VDF AI Chat compare to Microsoft 365 Copilot?

Microsoft 365 Copilot is licensed per seat and runs inference in Microsoft's cloud against Microsoft Graph data. VDF AI Chat is licensed as a flat platform fee, runs inference on infrastructure you control, and indexes whatever sources you connect — including systems outside the Microsoft estate. The practical differences that decide most evaluations are inference locality, per-seat versus flat cost at full-company rollout, and whether you can choose and swap the underlying model.

Can VDF AI Chat replace ChatGPT internally?

Yes. Most teams adopt it to retire shadow ChatGPT use — chat with any LLM (open or proprietary), drag-and-drop documents into the chat for RAG-backed answers, generate code with sandboxed execution, render HTML artifacts and Mermaid diagrams, and dictate prompts by voice. The difference: the conversation, the documents, and the embeddings all stay inside your governance perimeter, and usage is never fed back into a vendor's model training.

What data sovereignty guarantees apply?

VDF AI Chat can be deployed on-premise, in a sovereign cloud region, or fully air-gapped. All conversation history, file uploads, retrieval indices, and generated artifacts live in storage you control. Audit logs are immutable and exportable. The platform is designed to align with EU AI Act transparency and logging obligations, GDPR residency requirements, and sector-specific rules such as DORA, NIS2, and HIPAA.

See It Running on Your Own Data

A scoping call covers deployment mode, the sources worth indexing first, and sizing against your actual concurrency — no per-seat maths required.