You curate the corpus.
PDF uploads or a single IMAP folder per topic — that's the entire knowledge base. Schema-enforced via folder_access and ingest_rules, not honor system.
Curated AI for the enterprise
An AI that knows its boundaries.
TruePaddock doesn't read your hard drive, your inbox, or your Slack. It only knows the documents and email folders you explicitly hand it. Curated knowledge in, precision answers out.
No signup. The demo only knows 3 PDFs and 5 emails — and you can see exactly which ones.
Other AI tools vacuum up your whole company.
We only know what you teach us.
The Vacuum Cleaner
Every other AI tool
- Indexes your entire OneDrive, inbox, and Slack
- Six-month enterprise security review
- Hallucinates from a lunch-order email
- Can leak payroll if it's somewhere on disk
Curated AI
TruePaddock
- Indexes only the folders and PDFs you point it at
- One-week review — there's almost nothing to review
- Cites the exact source PDF or email it answered from
- Physically cannot answer about data you didn't curate in
“We don't read your company. We read what you tell us to.”
Every answer cites the curated source it came from.(Drop your screenshot at
public/screenshots/chat.png.)Boundaries, by design.
Three guarantees that the database — not just the marketing — enforces.
Every answer carries its receipt.
No source, no claim. Each assistant message ships with the exact PDFs and emails its passages came from. If retrieval returns nothing, the AI says so instead of guessing.
Per-teammate boundaries, too.
Members only see chunks from folders they're explicitly granted. Admins see everything. Owners run the audit. The session JWT carries the org id; queries are org-scoped at the SQL level.
How it works
- 1
Decide what the AI should know.
Point us at a PDF or a single IMAP folder per topic. That's the entire corpus.
- 2
We index only that.
Chunked, embedded, and stored as vectors in your Postgres. Nothing leaves your database.
- 3
Ask. Answers cite the source.
Every reply is grounded in a retrieved passage. No matching passage means no answer — by design.
Built so security teams say yes.
Your data stays in your Postgres.
We don't operate a multi-tenant data lake. Embeddings live in your database — pgvector, your column, your backups.
Authentik or Microsoft SSO.
The session JWT carries the org id. Every retrieval query is org-scoped at the SQL level, not the application layer.
Open architecture.
You can read every file in this app on GitHub. There's no proprietary 'black box' between your corpus and the model.
See the boundary in action.
The demo runs against a curated knowledge base of three PDFs and five emails. Try the on-menu prompts to see citations. Try the off-menu prompts to see what an AI with boundaries actually does.
Curated knowledge. Precision answers. Zero corporate dragnet.