Security, control and answers you can trust
What Simmetric Chat does for your organization - explained without tech jargon, with the facts decision makers need.
Answers based only on your documents
Your company's knowledge archive at the center of everything: answers that cite their sources, no browsing the internet, no making things up.
- Every answer points to the documents it came from: anyone can verify it
- The system answers only from your company's archive: it never searches the web and never invents information
- It works with the formats you already have: PDFs, documents, spreadsheets, presentations
- It reads scanned documents too, with a quality check before the text enters the archive
- Every work group keeps the memory of its own conversations: context is never lost
- It connects to all the major AI models on the market, with over twenty ready configurations - including the ones your company already uses
- You can compare two models side by side on the same question and pick the one that convinces you most
Hybrid RAG (RRF)
Vector search (LanceDB default, or Qdrant/pgvector/Chroma) fused with PostgreSQL FTS via Reciprocal Rank Fusion, k=60. Deterministic tiebreaker, per-chunk citations, semantic+keyword tags.
ReAct Agent Orchestrator
Single-call ReAct loop with plan mode, watchdog (wallclock, token, context, loop detection), unknown-tool circuit breaker, and progressive DLP flush via buffered replay.
Multi-LLM with 20 presets
Ollama, OpenAI, Anthropic, OpenRouter, Gemini, plus 20 provider presets (DeepSeek, Mistral, Qwen, xAI and more). Per-chat model resolution, 3-tier graceful fallback, Cmd+K quick-switch palette.
Document ingestion
PDF, DOCX, XLSX, PPTX, MD, CSV, TXT and YouTube transcripts. Recursive chunking (1000 chars, 200 overlap). Xenova local embeddings by default, OpenAI optional.
OCR via Ollama vision
Server-side OCR pipeline: pdfjs-dist renders pages, an Ollama vision model (glm-ocr by default) extracts text. Approve/reject workflow with quality and credibility scoring.
Archives & Wiki
Multi-page markdown knowledge bases with wikilinks. Dedicated agent skills wiki_query (FTS + BFS traversal, depth 3) and wiki_write (preview, dry-run, SSE edit events).
Synthesis pipeline
5-pass entity extraction → summary → BM25 candidate search → LLM decision (CREATE/UPDATE/SKIP/FLAG_CONTRADICTION) → overview. PHI gate blocks non-local egress when required.
Multi-instance scaling
Horizontally scalable behind a load balancer: Redis-backed rate limits, JWT revocation, SSE fan-out relay and distributed locks. pg-boss queue with 8 cron schedulers - no extra infrastructure.
The knowledge base organizes itself
Documents become an interconnected library: pages cite each other, contradictions get flagged, and every answer keeps citing its source. Multi-document synthesis with selective approval.
Your way of working, on command
Recurring instructions become ready slash commands - written once, reused by everyone, with no code: up to three custom ones in Community, unlimited in Enterprise.
Your data stays in your company
Privacy here is not a slogan: it is a verifiable configuration. The system can work without ever connecting to the internet.
- Configured to work offline, the system never communicates with the outside world: processing and archive stay on your servers
- Over thirty distinct permissions decide who sees what - item by item, area by area - assigned by your own IT office
- Each user reaches only what concerns them: no corner of the system opens by typing an unexpected address
- Sensitive data (tax codes, card numbers, bank details, email addresses) is masked automatically in conversations
- Information is encrypted even while it sits on your disks; encrypted, scheduled backups go wherever you decide, across multiple destinations
- Every account has usage limits: no single user can overwhelm the service
Access control, permission by permission
Your IT office decides who sees what, section by section: more than forty distinct permissions, mapped across 15 menu sections, with per-workspace and per-project grants. The operation log is immutable.
DLP filter
10 PII pattern classes redacted inline: email, credit card, SSN, API keys, AWS keys, private keys, IT VAT/IVA, codice fiscale, IBAN, EU phone. Applied to both input and output streams behind DLP_ENABLED.
Encrypted backups
Enterprise-gated: scheduled or on-demand AES-256-GCM backups with rotation-safe keys. Unlimited destinations (Local, S3, Dropbox, Drive, FTP, SFTP, Email), retention and point-in-time restore.
Air-gap by design
Ollama LLM + on-device embeddings + LanceDB vectors run fully offline. Package boundaries enforce HTTP-only server↔collector communication for split deployments.
HMAC API keys
sk--prefixed API keys verified with a dedicated HMAC-SHA256 secret (API_KEY_HMAC_SECRET), decoupled from JWT and encryption key rotation.
Confidential documents, automatically masked
Tax IDs, card numbers, IBANs and other sensitive data are detected and masked before anyone reads them - unmasking stays reserved to the authorized people.
Available where your people work
An assistant on the public website for customers. The same, on the internal portal, for employees. Same sources, same answers.
- An assistant embedded in your website: customers and citizens get immediate answers, with no queues and no waiting
- External users' conversations stay separate and anonymous, with configurable usage limits
- It connects to the tools your company already uses, without upending existing processes
- If you want, it collects the contacts of those who ask for help: questions become opportunities
- It embeds into the site with a short snippet of code: no rebuild of your existing site
Embeddable widget
Preact IIFE in a sandboxed iframe (no allow-same-origin). Isolated anonymous sessions, per-widget CORS allowlist, rate-limited sessions and lead capture. Widget creation is an Enterprise-tier feature.
MCP Marketplace
Curated catalog with verification tiers and health checks. Install workspace-scoped connections, pin per chat via ChatMCPPin, or expose your RAG as an MCP server to IDEs.
SSE chat streaming
Real-time token, status, citations, plan, wiki_edit, and done events over @microsoft/fetch-event-source. Slash /model, Cmd+K palette, Cmd+Shift+M side-by-side comparison.
Bidirectional MCP
Connect external MCP servers as agent skills, or start the server-side MCP endpoint to expose rag_search and workspace_memory to Cursor, Claude Desktop, and other clients.
Webhooks + Web Push
Outbound events signed with HMAC-SHA256 and VAPID Web Push for real-time browser notifications on chat completions and system events. Always-on in Community.
It works with the tools you already use
Connect external expert tools as agent skills - or let your IDEs query the company’s knowledge base. Both directions, from the marketplace.
For organizations with strict requirements
What a public body or a regulated company expects from a supplier: centralized access, tamper-proof records, full customization.
- Employees sign in with the company credentials they already use, managed by your IT office
- Every operation lands in a record nobody can alter: compliance is demonstrated, not declared
- Usage analytics: how much it is used, by model, by office - to plan costs before they arrive
- The app, the website assistant and emails carry your brand, not ours
- Each department can have its own specialized assistant (HR, legal, IT), with the AI model that fits best
- Interface and answers in eight languages, with automatic translation-completeness checks
- No limit on the number of backup destinations: more copies, in more places, under your control
Analytics & audit
Token usage dashboards: per day, per model, per user. Event log with webhook dispatch. Immutable INSERT-only audit trail (Enterprise) for compliance evidence.
Enterprise license
Community (AGPL-3.0) vs Enterprise: the core everyday features stay always-on. SSO, SCIM, white-label, unlimited widgets and workspaces - graceful degradation without a key.
i18n - 8 languages
English, Italian, Russian, German, French, Spanish, Chinese and Portuguese. Automated parity checks enforce translation completeness in CI.
Your costs, under your governance
Usage and spending limits decided by you, applied before the spend happens - the history is never deleted. Enterprise edition.
Activate the Enterprise edition without touching the server
Paste your Enterprise key in the admin panel: the upgrade applies immediately - no restart, no env file, no interruption.
Your customers’ channels, connected to the knowledge base
WhatsApp, Telegram, Discord and Slack conversations stay on your servers and feed the same documented answers - configured once by your IT office, without code. Enterprise edition.