Governed RAG Architecture

How PrivGPT structures authentication, policy enforcement, ACL retrieval, grounding, and audit in one backend flow.

Guide Highlights

  • OpenAI-compatible API layer handles incoming chat requests.
  • Request pipeline enforces policies before retrieval and generation.
  • ACL-aware retrieval restricts sources to user-authorized documents.
  • Grounded prompts and citations improve trust and traceability.
  • Audit events capture policy actions, sources, and latency.