Overview · Enterprise RAG

Ground every AI answer in your enterprise knowledge — without widening who can see it.

A language model on its own answers from what it absorbed in training — it has never read your credit policy, your SOPs or last week's board circular. Retrieval-augmented generation (RAG) fixes that at answer time: the system finds the most relevant passages in your approved content and gives them to the model with the question, so the reply is built from your material and cites it. In an enterprise, that retrieval also has to honour who is asking.

XcellAI Enterprise RAG as a Service runs on Sarv's Knowledge & RAG platform — knowledge bases, hybrid retrieval, retrieval testing and agent connectors. XcellHost adds the enterprise layer around it: identity and permissions, connectors, governance, evaluation, private hosting in India and a 99.95% SLA. Per Sarv, the platform can pair retrieval with fine-tuning for domain assistants, as in its Kar Saathi deployment.

Knowledge from Approved websites PDFs & office documents Markdown & wikis Enterprise connectors* Databases*
Generic AI assistant

“What is the approval limit for a branch manager?”

“Approval limits vary by bank, typically…”

  • Generic, from training data
  • No source, no audit trail
  • Can't tell who should see what
Enterprise RAG

“What is the approval limit for a branch manager?”

“Up to ₹25 lakh for secured retail loans [1]; above that, the regional credit committee approves [2].”

  • From the current credit policy
  • Shown only to staff with access
  • Logged with sources and user

Example is illustrative. * XcellHost delivery or integration scope, confirmed per engagement — not a published Sarv capability. Sarv lists websites, documents and Markdown as source types.

Plan your retrieval workflow

Six decisions that decide whether answers can be trusted.

Sarv's knowledge-base controls cover ingestion, chunk curation, retrieval testing and agent connectors. We walk through each with your owners, security and compliance teams before anything goes live.

01

Source preparation

Choose the websites, documents or Markdown that are approved to answer from. Check extracted text, headings and tables before they become chunks.

We checkScanned PDFs, broken tables, duplicate versions, content that must never be indexed.
02

Knowledge retrieval

Try hybrid, text-only and vector search side by side. Compare which chunks come back, their rank, relevance and whether they are active.

We checkExact codes and names (text wins) versus paraphrased questions (vector wins).
03

Knowledge curation

Edit weak chunks, write FAQs for real questions, switch on only the source subset you trust, and keep an owner and version review for each.

We checkEvery source has a named owner and a review date.
04

Index & workload review

Confirm embedding coverage and which embedding model was used — separately from "job finished". Test response time and cost at production-like volumes.

We checkZero un-embedded chunks; latency and cost at your expected query rate.
05

Answer evaluation

Write down the evidence each common, ambiguous and unanswerable question should use. Judge retrieval first, then the wording of the answer.

We checkA signed-off golden set with expected sources.
06

Deployment requirements

Decide which users and agents may read which source, where data is hosted, and how edits and deletions in a source reach the index.

We checkA deleted or restricted document stops being cited within the agreed window.
Evaluate before you launch

Test the sources, the retrieval and the answer — separately.

One "looks good" demo hides three different failure points. Each gets its own acceptance check: chunk review, retrieval testing, the agent connector, and change monitoring on the specific pages or whole site you choose.

Test question—
    —
    Sample test case — your golden set is written with your team.
    Bring a knowledge workflow to evaluate

    Three things to bring. We'll test RAG on them.

    The quickest way to know whether RAG fits is to try it on your own content, questions and access rules — not a vendor demo.

    1Sample sources

    A representative slice: policies, manuals, an FAQ site, a scanned PDF — with the access groups that apply to each.

    • 100–2,000 documents
    • 2–3 access groups
    2Representative questions

    Questions people actually ask — from tickets, call notes or the team inbox — including ones that should be refused.

    • 50–200 questions
    • Some that cross access lines
    3The target journey

    Who asks, where (intranet, Teams, web, WhatsApp, phone), and what happens when the assistant cannot answer.

    • Identity provider
    • Hand-off path to a person
    You get back
    1. Retrieval and permission results per question
    2. Groundedness scored against expected sources
    3. Gaps: missing, stale or conflicting content
    4. Deployment model, plan and INR quotation
    RAG, fine-tuning, or both?

    One changes what the model can look up. The other changes how it behaves.

    Tap what matters for your project — the recommendation moves.

    RAG

    Retrieval at answer time

    Supplies current information from approved sources with each question. Update or restrict a document and the next answer changes — no retraining.

    • Citations and audit trail
    • Access enforced per user
    • Deletions honoured on refresh
    Both

    A domain assistant

    Fine-tune for the vocabulary and style of a field, retrieve for the facts that change. Per Sarv, its Kar Saathi deployment combines the two.

    • Domain fluency
    • Current, cited facts
    • More effort to evaluate
    Fine-tuning

    Change model behaviour

    Trains a model on examples so it follows a format, tone or task. It does not keep facts current, cannot enforce per-user access, and cannot show where an answer came from.

    • Consistent format and tone
    • Shorter prompts
    • Retrain when behaviour must change
    For your answersStart with RAG.
    How it works

    Three steps from your systems to an answer you can audit.

    How retrieval supports an AI answer, in the order we build it — with the enterprise checks added at each step.

    01

    Prepare the sources

    Pick approved content, import or connect it, inspect the chunks, and keep each chunk's source, revision and access label visible so every answer can be traced.

    connect*extractchunkacl tag*
    02

    Inspect retrieval

    Run real questions in the retrieval bench, compare hybrid, text and vector modes, narrow by knowledge base or URL filter, and test as users in different groups.

    hybridfiltersas-user test*
    03

    Connect and evaluate answers

    Attach the knowledge-base connector to an AI agent, add guardrails, then score answers against the golden set and keep scoring after launch.

    connectorguardrails*golden setaudit*
    Intranet · Docs Wiki · Tickets Files · DB chunk acl + embed index withaccess labels SSO user asks permitted top-k guardrail → LLM answer [1] [2] · logged · scored
    PrepareRetrieveAnswer & audit
    Deployment options

    Four ways to run it. You choose how isolated.

    From a shared service for a first assistant to hardware that never leaves your building. Slide across to compare.

    AShared SaaSSarv platform, logically separated tenants
    • Live in about four weeks*
    • Separate knowledge bases per team
    • Business & Enterprise plans
    Business · Enterprise
    BDedicated single-tenantyour own instance, nothing shared*
    • Dedicated compute and index
    • Customer-managed keys*
    • Your maintenance windows
    Dedicated · on quote
    CPrivate cloud · Mumbai Tier IVin XcellHost's data centre, India only
    • Data, vectors and logs in India
    • Open models on GPU — price on quote
    • Watched by our 24×7 SOC
    Private · on quote
    DYour VPC or on-premises*deployed into your environment
    • Your network, your perimeter
    • XcellHost operates remotely
    • Feasibility review first
    Private · on quote

    Private hosting runs on XcellHost Private Cloud; GPU capacity for open models comes from AI Factory — see the NVIDIA GPU comparison. GPU is priced on quote. * Options B and D, and component placement for Sarv's platform, are confirmed per engagement.

    Identity & access

    Answers that respect the permissions you already have.

    If a person cannot open a document in the source system, the assistant should not quote it to them. We design for that from day one.

    Single sign-on*

    SAML 2.0 or OpenID Connect against your identity provider, including Microsoft Entra ID — run with our Managed Identity Service. MFA and conditional access stay where they are.

    Role-based access*

    Admins, knowledge owners, reviewers and end users get separate rights. Knowledge bases are scoped to groups, and every admin change is logged.

    Document-level permission inheritance*

    Access labels come from the source system's ACLs at sync time and are applied as a filter during retrieval, so restricted chunks never reach the prompt.

    Same question, two users

    “What changed in the bonus policy this year?”

      —
      Sample. Labels mirror the source system's permissions.
      Enterprise connectors

      Connect where knowledge already lives. Keep it in sync.

      Connectors for leading enterprise systems* bring content, metadata and permissions into the index on a schedule, so nobody uploads files by hand.

      Intranet & document librariesteam sites, cloud drives
      Cloud drivesshared drives, personal drives
      Wikis & knowledge pagesspaces, pages, attachments
      Issue & project trackerstickets, comments, resolutions
      IT service managementKB articles, incidents
      CRMaccounts, cases, knowledge
      ERPmaster data, documents
      File shares & databasesSMB / NFS shares, SQL
      Incremental syncOnly changed items re-indexed, on a schedule you set.
      Permissions carried overACLs and group membership travel with the content.
      Deletes honouredRemoved in the source, removed from the index.
      Scoped crawlInclude and exclude paths, sites or labels.

      * Connector availability, sync method and permission mapping are confirmed per system during discovery; some connectors are built and run by XcellHost. Product names belong to their owners. Enterprise plan includes 5 connectors; more at ₹9,999* each per month.

      Governance & security

      Controls your CISO and DPO will ask about first.

      Each control is agreed in writing, tested in the pilot and evidenced in the monthly report.

      Audit logs*

      Who asked what, which sources were retrieved, which model answered and what was shown — exportable to your SIEM.

      PII redaction & DLP*

      Personal identifiers masked in prompts and logs before the model sees them. Pair with Scrutiny DLP across endpoints and email.

      Retention

      Separate retention for sources, chunks, prompts and logs — for example, 180 days for logs in India.

      Guardrails*

      Topic policies, prompt-injection checks, refusal for out-of-scope questions and a hand-off to a person.

      Model choice

      Hosted models or private open models on GPU in India — chosen per use case. See OpenAI and Gemini managed services.

      No training on your data*

      Your content and prompts are not used to train models; we confirm the terms of every model provider in the contract.

      Encryption with customer-managed keys*

      TLS in transit and encryption at rest, with keys you control through Cloud HSM (BYOK). Revoke the key and the data becomes unreadable.

      * XcellHost delivery scope, confirmed per engagement and deployment model — not a published Sarv capability.

      Evaluation & LLMOps

      Quality is a number you see every month.

      We measure before launch and keep measuring, so a new source, model or prompt never quietly makes answers worse.

      Golden sets100–500 questions with the sources they should use, signed off by owners and re-run on every change.
      Groundedness & faithfulnessDoes each claim come from a retrieved passage? Are the citations correct? Scored per answer.
      Drift monitoringRetrieval hit rate, refusal rate and topic mix tracked weekly; alerts when they move.
      Human feedbackThumbs, comments and reviewer queues turn into curated FAQs and source fixes.
      Monthly scorecard · samplenot a customer result
      Groundedness0.00
      Citation accuracy0.00
      Hit@50.00
      Refused correctly0.00
      groundednesshit@5target
      Enterprise use cases

      Where large Indian organisations start with RAG.

      Filter by team. Each card shows what is indexed and the control that matters most.

      BFSI
      BFSI policy assistant

      Credit, operations and branch staff ask about policies and circulars; answers cite clause and version.

      Indexescredit policy, master directions, SOPsControllatest version first, branch-level access
      Operations
      HR & IT helpdesk

      Leave, payroll, device and access questions answered from handbooks and the IT knowledge base, inside Teams or the intranet.

      IndexesHR policies, ITSM articles, SOPsControlgrade- and location-specific rules
      Risk & legal
      Legal & contract Q&A

      Find indemnity caps, renewal terms and obligations across contract libraries, with the exact clause quoted.

      Indexescontracts, templates, playbooksControlmatter-level access, no external model*
      Customer
      Customer-support copilot

      Agents get a drafted, cited answer as the ticket or call arrives — on web, WhatsApp or voice via DeepCall AI.

      IndexesKB, product sheets, resolved ticketsControlPII redaction, agent approves
      Operations
      Engineering knowledge

      Runbooks, design docs, incident reviews and tickets searchable in plain language for engineers and NOC teams.

      Indexeswiki, runbooks, postmortems, ticketsControlproject-level access, secrets excluded
      Risk & legalBFSI
      Compliance Q&A

      Compliance teams map obligations to internal controls and ask "what does this circular require of us?"

      Indexesregulations, controls library, audit notesControlaudit trail on every answer
      Delivery, SLA & support

      Powered by Sarv. Delivered and run by XcellHost.

      Sarv provides the Knowledge & RAG platform. XcellHost scopes, implements, secures, bills and supports it — with an SLA you can hold us to.

      SarvThe platform
      • Knowledge bases & ingestion
      • Hybrid / text / vector retrieval
      • Retrieval bench & chunk tools
      • Agent connector
      XcellHostThe enterprise layer
      • SSO, permissions, connectors*
      • Guardrails, audit, keys*
      • Private hosting in Mumbai
      • SLA, 24×7 NOC + SOC, INR billing
      YouThe knowledge
      • Approve sources and owners
      • Keep source permissions right
      • Sign off the golden set
      • Decide hand-off rules
      99.95%uptime SLA on Enterprise and Dedicated plans
      24×7NOC + SOC in Mumbai, first call to resolution
      TAM*named technical account manager on Enterprise
      Monthlyquality, security and capacity report
      Discovery & risk review

      Use cases, sources, users, data classes and a measurable target agreed in writing.

      01
      Identity & access mapping

      SSO, groups and source permissions mapped and tested as real users.

      02
      Evaluation you can audit

      A golden set scored before launch and after every change.

      03
      Channels wired

      Intranet, web, WhatsApp or voice through DeepCall AI.

      04
      24×7 NOC + SOC

      We take the first call and escalate to Sarv when the platform needs it.

      05
      One INR invoice

      Platform, delivery and support on one GST invoice; model usage shown separately.

      06
      Compliance & India data residency

      Your documents become an AI's evidence. Govern them like evidence.

      Chunks, embeddings, prompts and logs can all carry personal data. The way we set up enterprise RAG helps you meet the rules below — compliance itself stays with your organisation.

      MUMBAI TIER IV · INDIA REGION EmployeesSSO · Entra ID Your systemsvia connectors* RAG platform · Sarv ingest · ACL · embed vector index private LLM on GPU* logs HSM keys hosted modeloptional* redacted Sources, vectors, prompts, logs and keys stay in India unless you choose otherwise
      DPDPDPDP Act 2023 & Rules 2025

      Index only data with a lawful purpose, honour erasure by removing and re-indexing, and keep access per source. As the Rules phase in, a breach is intimated to the Board without delay, with a detailed report within 72 hours.

      6 hCERT-In directions (April 2022)

      Reportable incidents go to CERT-In within 6 hours of noticing them, and ICT logs are kept for a rolling 180 days within India. Audit and access logs are planned for that.

      BFSIRBI, SEBI & IRDAI

      Outsourced technology must be governed, auditable and exit-ready — RBI's IT outsourcing directions, SEBI's CSCRF and IRDAI's guidelines. You get source lists, access records, test results and an exit plan.

      42001ISO/IEC 42001

      The AI management system standard. Enterprise RAG evidence — risk register, evaluation, monitoring — feeds your programme; our ISO 42001 consulting helps you build it.

      Regulatory summaries checked October 2026 for orientation only — not legal advice. Confirm current requirements with your counsel, CERT-In, the Data Protection Board or your sector regulator. * Placement of Sarv platform components and external model use are confirmed per engagement.

      Plans

      Enterprise tiers, priced per month. Model usage at actuals.

      Each plan includes the Sarv platform, XcellHost delivery and support. LLM and embedding usage is billed at actuals or on your own keys; GPU for private models is on quote.

      Business

      Department assistants

      ₹44,999/month*
      5 knowledge bases · 10,000 documents · 50,000 queries / month
      • Hybrid, text and vector retrieval
      • Answers with citations
      • Access per source and user group
      • 100-question golden set, re-run monthly
      • 24×7 support, monthly quality report
      Most chosen Enterprise

      Organisation-wide, governed

      ₹1,49,999/month*
      20 knowledge bases · 50,000 documents · 2,00,000 queries / month
      • Everything in Business
      • SSO (SAML / OIDC, Entra ID)*
      • Document-level permission inheritance*
      • 5 enterprise connectors*
      • PII redaction, guardrails, audit logs*
      • 99.95% SLA, named TAM*
      Dedicated / Private

      Isolated or in your VPC

      On quoteafter a review
      single-tenant · Mumbai Tier IV · your VPC*
      • Everything in Enterprise
      • Dedicated or private deployment
      • Private open models on GPU — on quote
      • Customer-managed keys via Cloud HSM*
      • Audit evidence packs for BFSI

      * Indicative — confirm with XcellHost. INR, excluding 18% GST. Sarv publishes no prices for RAG as a Service, so all figures are XcellHost placeholders. Business reuses the Professional price on our RAG as a Service page; add-ons reuse that page's prices. LLM and embedding usage, WhatsApp conversation charges and GPU are billed separately.

      Configure

      Build your enterprise RAG plan. See the rupee total.

      Fixed-price items go to the cart. Dedicated, private, voice and GPU come as a quotation.

      1 · Plan
      6 · Channels & services
      Your estimate · indicative

      Enterprise

        Monthly₹0
        One-time₹0
        Subtotal₹0
        GST (18%)₹0
        First invoice incl. GST₹0
        * Indicative — confirm with XcellHost. INR excl. 18% GST. Model usage is billed at actuals and never added to the cart. Voice and GPU are quoted separately.
        Tool · RAG sizing & cost estimator

        From documents to vectors, storage and monthly model cost.

        Every assumption is editable. Model prices are yours to enter — we never assume them — and the working sits under the result.

        Your content
        Chunks & vectors
        Chunk size (tokens)
        Embedding dimensions
        Precision
        Questions
        Your model rates ₹ per 1 million tokens — enter from your provider
        Estimated footprint
        Pages0
        →
        Tokens0
        →
        Vectors0
        →
        Storage0
        Vector index 0Chunk text 0Metadata 0
        One-time embedding—0 tokens
        Monthly re-embedding—0 tokens
        Monthly LLM (in + out)—0 tokens
        Monthly model cost—enter your rates
        Fits Enterprise
        Working pages = documents × pages/doc · tokens = pages × tokens/page chunks = ⌈tokens ÷ (chunk × (1 − overlap))⌉ index = chunks × dims × bytes × overhead · text = chunks × chunk × 4 B LLM tokens/month = queries × (k × chunk + prompt + answer) cost = tokens ÷ 10⁶ × your ₹ rate —
        Illustrative only. 4 bytes per token of text, 512 bytes of metadata per chunk and 50 tokens per question embedding are rules of thumb. Model costs appear only after you enter your own rates. Private GPU models are priced on quote instead.
        Tool · which deployment model?

        Six answers. Shared, dedicated, private or your VPC.

        Pick what describes your organisation. The recommendation, reasons and plan update as you go.

        Recommended deployment
        ——
        0%
          Plan—
          Where data lives—
            Private Cloud →
            Compare

            Build it in-house, a public AI assistant, or managed enterprise RAG.

            What you needIn-house RAG buildPublic AI assistantXcellAI Enterprise RAG
            Who sees which documentYour team writes ACL filtersWhatever the user pastes inSource permissions inherited at retrieval*
            Where data is processedWherever you host itProvider's regions, often abroadMumbai Tier IV or your VPC*
            Citations & audit trailOnly if you build themRarely tied to your sourcesCited answers, every question logged
            Personal data in promptsCustom redaction codePolicy and training riskPII redaction before the model*
            Proof it worksAd-hoc testingNone for your contentGolden set scored monthly
            Uptime & supportYour on-call teamConsumer terms99.95% SLA, 24×7 NOC + SOC
            BillingSeveral USD vendors + peoplePer-seat USD subscriptionsOne INR GST invoice
            Get started

            Live in six to eight weeks. Measured on your questions.

            Typical timings for an Enterprise deployment on shared infrastructure*. Private deployments add hardware lead time.

            1. 01DiscoverUse cases, data classes, risks, golden set and deployment model agreed.Weeks 1–2*
            2. 02ConnectSSO, connectors and permission mapping set up and tested as users.Weeks 2–3*
            3. 03Prepare & tuneSources curated, retrieval tuned, guardrails configured.Weeks 3–5*
            4. 04EvaluateGolden set scored; security and DPO review signed off.Weeks 5–6*
            5. 05LaunchChannel live for a pilot group, then the organisation.Weeks 6–8*
            6. 06Run & improveSLA, monthly scorecard, drift alerts, quarterly review.ongoing