XtroAI — AI Engineering Studio Healthcare · Legal · Enterprise Operations Two slots open — Q4 2026
← Engagement index

Enterprise knowledge

Auxee

Hybrid retrieval over scattered internal sources — permission-aware by design, with a citation enforced on every answer it gives.

Live Sector — Enterprise knowledge System — Hybrid retrieval
Diagram: a user query runs through hybrid retrieval, then an access gate — only sources the user is permitted to see can produce an answer, which always carries a citation. USER QUERY HYBRID RETRIEVAL PERMISSION CHECK ACCESS GATE ANSWER + CITATION SOURCE EXCLUDED
Fig. 1Permission checks run at retrieval time, not after — a document a user can't see is never a candidate the system can answer from.

The problem

Auxee's internal knowledge was spread across systems with different access controls, and existing search either missed the right document entirely or surfaced content a given user shouldn't have been able to see in the first place.

The approach

Hybrid retrieval — lexical and dense — over the connected sources, with permission checks enforced at retrieval time rather than filtered after the fact. The system won't answer from a document a given user isn't allowed to see, and every answer carries a citation back to its source.

What we evaluate

Retrieval quality is checked against a held-out set of real internal questions with known correct sources, alongside a specific permission-leakage test: confirming the system never surfaces content outside a given user's access.

Status today

Live, handling day-to-day internal knowledge queries.

Architecture and evaluation specifics beyond what's above are covered by the client's NDA. Get in touch if you'd like to talk through what's relevant to your own engagement.