Bring business knowledge
into context.

How data, documents, people and processes form a usable knowledge foundation

Business knowledge lives in strategies, operational systems, projects, contracts, policies, media and employees’ experience. Making it usable across the organisation starts with structure: what exists, what it means, who owns it and how it connects. A hybrid knowledge architecture links these resources through shared terminology, stable identifiers and traceable relationships. This makes information discoverable across departments, helps assess change and makes knowledge reusable by people and agents, with controlled use of local and external models.

In-depth article · Updated October 27, 202623 min read5 interactive diagrams
01

Make knowledge discoverable together

Use a shared catalogue to find knowledge across departments and systems, carrying ownership, freshness and permissions with it.

02

Make relationships explicit

Connect products, processes, projects, people and rules through a domain model, making dependencies and knowledge gaps easier to examine.

03

Reuse knowledge with confidence

People and agents use the same maintained context. Authoritative sources, derived information and permitted actions remain distinct.

01 / Understanding Deep Knowledge

A shared structure for distributed knowledge.

The aim is an organisation-wide knowledge structure that connects different domains: strategy and decisions, organisation and expertise, customers and contracts, products and services, processes and systems, and projects and their outcomes. These resources have different owners and protection requirements. Making them discoverable together does not mean giving everyone access to everything.

A knowledge catalogue first describes which resources exist, where they are held, who owns them and under what conditions they may be used. A shared vocabulary organises domain terms, synonyms and categories. Stable identifiers connect the same product, process or project across systems. Versions, validity and provenance show which statement applied at a particular time.

Authoritative business systems can remain in place. Depending on the need, knowledge is retrieved through approved interfaces or indexed as a controlled, refreshable derivative. A central point of access does not require a complete copy of all company data. Experience from conversations and practical work becomes durably reusable only when it is deliberately documented, interpreted and approved.

In this article, Deep Knowledge describes this architectural principle: content is connected to meaning, relationships, ownership and provenance. The term denotes neither a particular product nor a standardised quality level. A knowledge base remains a maintained selection and organisation of available knowledge; a language model does not automatically make it complete or correct.

Retrieval-Augmented Generation, or RAG, supplies a language model with relevant, authorised sources as context at runtime. Retrieval is distinct from changing model weights through training or fine-tuning; the approaches can complement each other. Answers still require verification. Their value depends on retrieving the right resources and preserving the conditions that give them meaning.

ComponentGuiding questionContribution
Knowledge baseWhich approved content is available?Documents, owners, versions and a maintained structure.
Vector and full-text searchWhich passages are relevant to this question?Semantic similarity complements exact terms, product codes and filters.
Knowledge graphWhat is connected, and how?Explicit relationships between products, rules, processes and sources.
Language modelHow can the retrieved context be explained?Formulates and structures an answer within the defined boundaries.
02 / Hybrid architecture

Control the knowledge. Choose where to process it.

The core of a hybrid architecture is the separation of authoritative sources, knowledge organisation, retrieval and model processing. In this reference architecture, the catalogue, prepared content and search indexes operate within a controlled environment. Originals remain in their designated business systems or repositories. Depending on the task, the model layer can use a local service or a cloud service approved contractually and technically. Every connection needs defined update rules, data location and ownership.

Hybrid does not mean automatic fallback. If a local answer is not good enough, that does not justify sending confidential documents to an external provider without further checks. Before a request is processed, the system verifies identity and access rights, classifies the data, minimises the context and makes a binding decision about the permitted processing route. If the necessary rights or approval are missing, that route is blocked. If reliable sources are missing, asking for clarification or explaining why an answer cannot be given is more useful than switching models.

The local route also needs to be examined from end to end: OCR, embeddings, graph extraction and reranking can themselves call models or external services. Telemetry, error logs and caches can carry information outside the environment. For every processing step, the architecture must therefore specify where it runs, which data it receives and which network destinations are allowed.

This is distinct from hybrid retrieval: combining full-text search, vectors and, where useful, a graph. That search strategy can run entirely locally. Conversely, a locally hosted model can access an external dataset. The two decisions should be planned independently.

Interactive example · no data transfer

What may the cloud see?

Three requests, three routes. These scenarios illustrate a deliberately restrictive policy; approval does not replace a legal assessment.

Company environment
  1. 01Identity & accessAccess checked
  2. 02Sources & preparationOriginals, metadata, ACLs
  3. 03Retrieval & contextAuthorised local indexes
  4. 04AnswerLocal model + sources
Cloud serviceOptional cloud modelNo transfer

Local route: public sources are accessible; cloud use has not been approved.

Processing
Local
Transferred context
No transfer
Reason
Without additional approval, even public material stays within the local workflow.

The following table describes responsibilities and data locations, rather than a shopping list. Processing nodes can run separately or share infrastructure for an initial pilot. Capacity and separation depend on data volume, concurrency, availability and protection requirements.

System layerInfrastructure roleData and processing
Source storageManaged file or object storageOriginal files, versions and access metadata; encrypted backups with a recovery plan.
Data Prep & ETLDedicated processing nodeParsers, OCR and workflows. RAM, working directories, temporary files and logs are part of the protection plan.
Knowledge and retrieval layerDatabase service with appropriate SSD storageDocument metadata, chunks, full-text and vector indexes; graph data and extraction status where needed.
Local inferenceModel server with suitable CPU/GPU capacityModel weights on storage; runtime requirements in RAM and, where applicable, GPU memory depend on the model, context and workload.
Policy gatewayControlled interface integrated with identity servicesAuthorisation, model selection, allowed network destinations and a logged approval decision for the minimum necessary context.
Agent runtime & toolsControlled orchestration serviceTask state, permitted tool calls and approvals; connections to business systems in the user’s context. Working state stays separate from approved knowledge.
Cloud modelApproved external serviceOnly the approved content for the specific request. Assess provider terms, retention periods and potential transfers separately.
User interfaceInternal web serviceSearch, answers and verifiable source passages. Signing in does not replace authorisation for individual documents.
03 / Data types & input

A data type is more than a file extension.

An organisation-wide knowledge base needs four separate answers: What is the business subject? How is the content structured? Which format carries it? Which rules govern its use? A contract is a business subject, PDF is a file format and “confidential” is a classification. None of these attributes alone determines the right processing method.

Structured data has defined fields, such as customer, order or financial records. Semi-structured data carries recognisable keys or envelopes, such as JSON, XML, event logs or email metadata. Unstructured text conveys meaning mainly through free language. Multimodal content adds the media dimension: images, audio, video or technical models. These are not four mutually exclusive boxes. An email combines fields, free text and attachments; a PDF can contain prose, tables and scans; CAD geometry can be highly structured.

Field-level types also need to be preserved: numbers, dates, Boolean values, identifiers and enumerations serve different purposes. A product code is usually an identifier, not a number for arithmetic. Currencies, units, time zones and relationships between records carry meaning. Converting everything into prose can lose important validation and analysis capabilities.

Interactive guide · no data transfer

Different data. Appropriate preparation.

Three forms of structure and an additional view of media: choose a category and follow its path from source to reusable representation. These categories can overlap.

Structured

Fields with defined meanings

  1. 01 / Source
    ERP, CRM, tables

    Customer IDs, transactions, product records or measurements in defined fields. CSV can transport such records.

  2. 02 / Preparation
    Validate & map

    Check data types, keys, units and relationships. Handle missing values and duplicates according to domain rules.

  3. 03 / Reusable representation
    Records with stable IDs

    Preserve typed values and references for queries, calculations and connections. Do not routinely flatten them into prose.

Example: calculate a revenue total from the relevant transactions instead of asking a language model to infer it from document passages.

Semi-structured

Recognisable fields, variable structure

  1. 01 / Source
    JSON, XML, event logs

    Fields and hierarchies are recognisable but may vary by source or event. Email header data are another example.

  2. 02 / Preparation
    Parse & normalise

    Map field names and nested structures, normalise timestamps and preserve the meaning of events.

  3. 03 / Reusable representation
    A shared event or object model

    Select relevant IDs, relationships and content while keeping the original structure traceable.

A file format does not determine structure by itself: a strictly validated JSON model can be highly structured.

Free text

Meaning in language and document structure

  1. 01 / Source
    Documents, notes, email bodies

    Strategies, decisions, reports, contracts and recorded experience contain statements, conditions and reasoning.

  2. 02 / Preparation
    Read layout & preserve context

    Extract text and headings, check reading order, handle tables separately and form coherent passages.

  3. 03 / Reusable representation
    Passages with source locations

    Text remains traceable to its source, version and position. Extracted entities and relationships require separate review.

Here, “unstructured” means there is no consistent domain data schema. A document can still contain headings, tables and other structures.

Multimodal

Images, sound, motion and geometry

  1. 01 / Source
    Images, audio, video, CAD

    Photography, meeting recordings, training videos and technical models contain information beyond plain text.

  2. 02 / Preparation
    Use medium-specific processing

    Use OCR, transcription, timestamps, image analysis or domain CAD parsers as appropriate. Flag uncertainty.

  3. 03 / Reusable representation
    Media references plus selected derivatives

    Connect originals with regions, time positions or object identifiers. Descriptions and transcripts supplement the medium.

Multimodal describes media, not a level of structure. CAD geometry can be structured; a video contains images and sound. No single text version captures everything.

For every data form: the same layer of governance.

A business domain is not a data type. A contract may exist as a record, a PDF and a scan; an email combines metadata, free text and attachments.

Data input starts with a catalogued, approved resource and an appropriate connection. Structured data retains keys and field types; documents retain structure and source locations; media may gain OCR, transcripts or descriptions as labelled derivatives. Docling can convert different document formats into a shared intermediate representation. That working representation supplements the original rather than replacing it.

Every resource needs stable identifiers, provenance, domain ownership, version, modification time, validity and access rules. Source locations may require a page, section, record key or timestamp. Import time and business validity are different concepts. Source permissions must survive through retrieval and output.

PerspectiveExamplesQuestion for knowledge organisation
Business subjectStrategy, contract, process, project, product, expertiseWhat does the content describe, and which domain does it belong to?
Structure and mediumTable fields, key/value pairs, prose, image, audio, modelWhich parts can be extracted, validated or interpreted?
File or exchange formatCSV, JSON, XML, PDF, DOCX, JPEG, MP4, CAD formatWhich parser or interface is required?
Ownership and useSource, owner, version, validity, classification, permissionsWho maintains it, how current is it and who may use it?
04 / Data cleansing & KNIME

Remove noise. Preserve meaning.

Data cleansing is more than removing empty lines. It produces consistent working data that can be checked. This includes character encoding, language, date formats, units, duplicates and the mapping of alternative spellings. But “Art.-Nr. 0042” and “Artikel 42” should only become the same entity under an established domain rule. Leading zeros, version suffixes, negations and exceptions can be decisive.

Originals remain unchanged during preparation; retention and deletion rules continue to apply. Every transformation produces a traceable derivative linked to a version. A checksum can identify an identical document; similar documents require more care. Two almost identical service instructions may apply to different product versions. Merging them without checking would destroy knowledge rather than clean it.

KNIME Analytics Platform can provide a visual layer for these processing steps: reading data, reshaping fields, applying rules, joining datasets and checking results. Custom Python steps or specialised parsers can extend a workflow. A visible sequence makes domain review easier. It does not, by itself, make a process correct or lawful.

A useful process includes quarantine for problematic inputs. Missing permissions, damaged files or doubtful OCR results should not simply pass into the knowledge base. Sampling and automated validation rules complement one another. Working directories and temporary tables can contain sensitive content; KNIME processing should therefore not be equated with “RAM only”.

  1. 01Read
  2. 02Validate
  3. 03Normalise
  4. 04Check duplicates
  5. 05Approve
  6. 06Hand over with versioning
An example of a traceable preparation workflow. Failed checks lead to a separate review, rather than automatically passing to the next step.
05 / Chunking & retrieval

A relevant passage still needs its context.

Chunking divides large documents into units that can be retrieved selectively and processed as context. Sections that are too small separate rules from their exceptions; sections that are too large introduce irrelevant information into an answer and consume more context. There is no universally best size. Document structure, questions, the embedding model, tokenizer and downstream processing determine a useful split.

A good chunk carries its provenance: document ID, version, heading path, source location, validity and access rule. Tables should remain readable with their column headings and units. A list of prerequisites should not be separated from the action to which it applies. In longer chapters, a small search result can refer to a larger parent section; context assembly then determines how much is needed.

Overlap can preserve continuity between two windows, but it also produces duplicate content. This increases index and context size and can cause repetition when results are assembled. The demo deliberately counts words to make the split visible. In a production pipeline, size limits must be checked with the actual tokenizer in use.

Once the content is split, embeddings and search indexes are created. Exact product codes benefit from full-text search or structured filters; semantically similar phrasing benefits from vector search. Results can then be reranked. Access filters apply to every candidate and again before the context is passed on. A relevance score is not a probability that something is true. Text passages also provide source references for derived knowledge.

Interactive example · no data transfer

How much context does a chunk need?

One synthetic document, three ways to split it. This example counts words rather than model tokens. It illustrates boundaries and repetition, not retrieval quality.

Example document · fictional knowledge policy

Every project names a person responsible for its domain. Decisions are recorded with their date, reasoning and affected processes. The approved version remains clearly distinguishable from drafts.

Connected systems and documents receive stable identifiers. When a policy changes, its owner checks which projects and processes are affected.

Access permissions from the original source also apply to derived summaries. Shared search must make confidential content available only to authorised people.

Words in original
69
Chunks
4
Word occurrences in chunks
69
Additional repetitions
0
Chunk 0118 words

Every project names a person responsible for its domain. Decisions are recorded with their date, reasoning and affected

Chunk 0218 words

processes. The approved version remains clearly distinguishable from drafts. Connected systems and documents receive stable identifiers. When a

Chunk 0318 words

policy changes, its owner checks which projects and processes are affected. Access permissions from the original source also

Chunk 0415 words

apply to derived summaries. Shared search must make confidential content available only to authorised people.

Blue highlights: words already included in a previous chunk. Headings are not counted.

Fixed word windows can split sentences and conditions. Their fixed size does not account for document structure.

4 chunks · 69 word occurrences · 0 additional repetitions.

06 / Relational & Graph

Two data models. Different ways into the knowledge.

A relational database organises data into tables with rows and typed columns. Primary keys identify records; foreign keys and junction tables represent relationships. Queries connect tables through JOINs. This fits uses such as transactions, master data, orders and consistent reporting. Relationships are explicitly part of the relational model.

A graph database makes entities and connections direct elements of the data model. In a property graph, nodes and typed, directed edges carry properties. Queries follow those connections, for example from a system to dependent processes, responsible teams and supporting documents. This is particularly useful to explore when paths and changing connections are themselves the subject of the question.

The following example represents the same entities and relationships in both forms. Changing the representation does not change the business answer. The choice depends on the required queries, rules and operating constraints, not on an assumption that graph databases are inherently newer or faster.

CriterionRelational modelGraph model
Query focusFilter, join, total and group records.Explore relationships, paths, neighbourhoods and dependencies.
Relationship modelKeys, foreign keys, JOINs and recursive queries when needed.Typed edges and traversal, with properties on nodes and edges.
Rules and qualitySchema, types and constraints enforce defined model rules.Schema, identities, constraints and domain rules are required here too.
Typical useAuthoritative business and transaction data, consistent reporting.Connected context across domains, provenance paths and impact analysis.
Decision criteriaQuery patterns, integrity, operating effort and measured performance.The same criteria; a graph offers no universal performance advantage.
Interactive guide · no data transfer

The same facts. Two data models.

Both models can represent connections and answer the same question. The difference is how data are organised and how relationships are queried.

Shared question · fictional organisation data

Which processes use the ERP system — and which teams are responsible?

Relational tables

Teams

team_id · PKName
T1Operations
T2Finance

Systems

system_id · PKName
S1ERP

Processes

process_id · PKNameteam_id · FKsystem_id · FK
P1Order handlingT1S1
P2InvoicingT2S1

A join connects processes to teams and systems through matching keys. Filtering for ERP returns both process names and their responsible teams.

PK = unique primary key. FK = foreign key referencing an existing record. This example assigns one team and one system to each process; multiple assignments can be represented relationally with junction tables.

Graph model

usesusesownsownsS1ERPS1: ERP · SystemP1Order handlingP1: Order handling · ProcessP2InvoicingP2: Invoicing · ProcessT1OperationsT1: Operations · TeamT2FinanceT2: Finance · TeamusesusesownsownsS1ERPS1: ERP · SystemP1OrderhandlingP1: Order handling · ProcessP2InvoicingP2: Invoicing · ProcessT1OperationsT1: Operations · TeamT2FinanceT2: Finance · Team

The query follows incoming “uses” relationships from ERP to the processes, then “owns” relationships to their teams.

The same answer in both models

Order handling → Operations. Invoicing → Finance. Both processes use ERP.

A graph is not evidence of better data quality or higher speed. The appropriate choice depends on queries, data volume, operations and integration effort. A knowledge architecture can combine both models.

Distinguish the knowledge model, database and search index

A knowledge graph models entities, meaning and relationships at the domain level. A graph database is one possible way to store and query that model. A document repository preserves content; a full-text index finds terms; a vector index retrieves by similarity. An embedding is neither a verified domain relationship nor a substitute for its original evidence. A graph is itself structured: unstructured files gain a place in it through interpretation and modelling.

Combine the models with clear responsibilities

A viable architecture combines these roles: authoritative business data may remain relational, originals stay in their repositories, relationships sit in a maintained knowledge layer and search representations use suitable indexes. These roles do not always require separate database products; some platforms cover several. Changes, deletions, versions and permissions need traceable propagation from sources to derivatives. Conflicting copies must not silently become competing authorities.

07 / Knowledge graphs

A map of knowledge across the organisation.

An organisation-wide knowledge graph connects domains that repositories often keep apart: people and responsibilities, processes and systems, projects and products, customers and contracts, and policies and documents. Its value lies in cross-domain questions: which processes depend on a system? Who owns them? Which rules and decisions matter to an initiative? The following overview presents possible relationship types as a simplified organising model, not a complete company dataset.

Interactive example · no data transfer

A map of enterprise knowledge

This overview shows knowledge domains and relationship types. It is a simplified conceptual model, not a representation of a specific company. In an operational graph, these correspond to individual processes, teams, contracts and documents with their own identifiers.

Enterprise-wide question

How do scattered sources become a shared knowledge space?

How the knowledge model helps

Documents are mapped to subjects and processes; the same teams, products and contracts receive consistent identifiers. Shared concepts and connections expose context across departments and systems.

Value

Sources can be discovered and understood together. Provenance, ownership and validity stay attached to content instead of getting lost in separate folders.

Prerequisite

A maintained knowledge catalogue, shared concepts and consistent IDs. Authoritative systems and their access rules remain in force.

11 knowledge domains · 13 relationship typesConceptual model
describesgovernsrecordsownsheld withinownsparty tocontributes tosupportschangeshandlesconcernsmeasuresProcessesProcessesTeamsTeamsSystemsSystemsPoliciesPoliciesExpertiseExpertiseProjectsProjectsProductsProductsDocumentsDocumentsCustomersCustomersContractsContractsMetricsMetricsdescribesgovernsrecordsownsheld withinownsparty tocontributes tosupportschangeshandlesconcernsmeasuresProcessesProcessesTeamsTeamsSystemsSystemsPoliciesPoliciesExpertiseExpertiseProjectsProjectsProductsProductsDocumentsDocumentsCustomersCustomersContractsContractsMetricsMetrics

Select nodes to explore the relationship types.

This diagram defines possible connections. It does not claim complete coverage of business knowledge or run a real knowledge query.

This makes knowledge not just searchable but explicitly related. Changes can be traced through known dependencies for review; new employees can find context and responsible people; several teams can refer to the same terminology and evidence. The graph still contains only documented relationships. A missing edge does not prove there is no connection in the business.

Modelling begins with a small set of stable domain types and identifiers. An organisational unit, person, process, system, project, product and document represent different entities. “owns”, “uses”, “applies to” and “supports” are different relationships. A shared vocabulary and domain-owned mappings prevent matching names from being treated as proof of identity.

Model-assisted extraction initially produces proposals. Each derived statement retains its source, passage, validity, extraction version and review status. Conflicts and unreviewed connections remain visible. Domain owners decide, under defined rules, which statements enter the approved knowledge base.

Graph-assisted RAG can add connected context to text retrieval. A question might examine the surroundings of a project or follow a chain from process to system to policy. Permissions and business validity determine which relationships and sources may enter the answer. A larger graph alone does not produce better answers; suitable modelling, maintenance and evaluation do.

Graph traversal must not cross access boundaries. A neighbouring node, a relationship or a generated summary can also contain protected information. The access rights of underlying sources must therefore constrain every expansion of the search path. Derived relationships should be reviewed, corrected or removed when sources change or are deleted.

08 / Agents & workflows

From retrieved knowledge to the next step in the job.

Knowledge search retrieves information; RAG uses it to produce an answer. An agent can also select tools, assess their results and initiate further steps. The practical value emerges when a recurring task spans several searches and applications: less manual copying, a traceable process and a prepared handover to the responsible person.

Agents can use this knowledge structure across departments: assemble relevant rules and earlier decisions for a project, identify dependencies of a system change for review, or prepare a research and documentation draft. They connect authorised sources, request missing information and retain evidence. A shared knowledge foundation helps avoid every application creating its own conflicting view of the business. These diagrams illustrate possible approaches; they do not access real systems.

A rule-based workflow is often sufficient for a well-defined process. Agent decisions are useful where the next research or tool step depends on intermediate results. The permitted actions still remain predefined.

LayerRole in the system
Knowledge base & graphProvides approved facts, relationships, versions and source passages. The graph itself does not execute a task.
Language modelInterprets the request and proposes a next step or an answer.
Agent harness / runtimeManages task state, tool calls, checks and interruptions. Enforces boundaries independently of the model.
Business systems & toolsRead or change specific data in a ticketing, CRM or ERP system. Check authorisation on every call.
  1. 01Clarify the task
  2. 02Retrieve knowledge
  3. 03Prepare a draft
  4. 04Check approval
  5. 05Execute the action
  6. 06Confirm the result
A possible knowledge-grounded agent workflow. A consequential action runs only after the required approval. Without a confirmed result, the task is not considered complete.

Hybrid models, controlled tools

Knowledge retrieval and connections to business systems can remain local. For a demanding planning step, an approved cloud model receives only the context authorised for that purpose. It proposes tool calls; the local runtime checks them again. Credentials stay outside the model context. Using a stronger model does not grant additional permissions.

Reading, preparing drafts and taking binding action are separate capabilities. Orders, external messages and other consequential changes require appropriate approval. Every retrieval and action remains tied to the permissions of the person involved. Document content is evidence, not an instruction to execute.

Finish a task reliably

The runtime records completed steps and limits duration and the number of tool calls. After an interruption, the actual state is checked in the business system. Unique task identifiers and idempotent interfaces prevent retries from creating the same order twice within the designed process. Without that protection, the case needs investigation. A success message follows a confirmed system result, not merely the text produced by the agent.

Use feedback to improve the knowledge base

Agents can collect conflicts, missing sources or possible new relationships for review. A confirmed approval emerges only through the designated domain process. Conversation history, working state and the approved knowledge base remain separate: a persuasive answer must not silently overwrite the graph as a new truth.

The knowledge base supports the next step. The runtime controls it. The business system confirms what actually happened.

09 / Compliance & security

Permissions must cover the entire processing chain.

Local storage is a location decision, not a data protection certification. A protected knowledge system accounts for rights during import, at every derivation step, during retrieval and at output. Data protection, copyright and information security answer different questions. They should be planned together without being confused with one another.

GDPR: purpose, legal basis and data subject rights

Where personal data is processed, requirements include purpose limitation, data minimisation, accuracy and storage limitation. The project needs an appropriate legal basis; special categories such as health data also require an applicable exception under Article 9(2). Information obligations and data subject rights must be fulfilled in the specific use case. A data protection impact assessment is required where the processing is likely to result in a high risk. Particularly relevant provisions include Articles 5, 6, 9, 13/14, 15–18, 25 and 35 GDPR.

An embedding is not automatically anonymous. Chunks, graph relationships, prompts and answers may also relate to an identifiable person. Deletion and rectification procedures must therefore cover derivatives, caches and logs. Backups need documented retention periods and a procedure that prevents restored data from making previously deleted content available again without appropriate controls. The DSK guidance explicitly addresses data protection requirements within the RAG subsystem.

Cloud processing: check contracts and data flows

For external services, the parties’ actual roles need to be established. Where a provider acts as a processor, the appropriate agreements and controls are required, including those relating to subprocessors. Retention periods, logging, potential use for training, deletion options, access locations and transfers to third countries all need assessment. Such transfers are also subject to the conditions in Chapter V of the GDPR; a European storage region alone does not resolve every question about access and transfers. See Articles 28, 32 and 44 onwards GDPR.

An approval button records a decision; it does not create a legal basis. Pseudonymisation and context minimisation can reduce risk, but do not guarantee that a person can no longer be identified. The permitted data scope must cover the entire call, including system instructions, metadata and, where applicable, tool responses.

Copyright: distinguish access, analysis and output

Being able to access a document does not automatically permit every subsequent use. Adding content to a knowledge base often involves making copies. The starting point is ownership of the relevant rights, appropriate licences or a statutory exception applicable to the specific case. The right of reproduction under Section 16 of the German Copyright Act (UrhG) therefore needs to be considered separately from access alone.

The text and data mining provision in Section 44b UrhG requires lawfully accessible works and recognises reservations of use; for works available online, such reservations must be machine-readable. Copies made for text and data mining must be deleted when no longer necessary. Whether a particular RAG process falls within this provision needs to be assessed for the project. Section 60d UrhG provides an exception for certain scientific research under its own conditions; it is not a general permission for commercial knowledge systems.

Permission to analyse a work does not automatically determine which passages may be reproduced in an answer or made publicly available. Substantial reproductions and public offerings require a separate rights assessment; relevant provisions include Section 19a UrhG. Attribution does not replace any required permission to use the content. Provenance and usage conditions therefore belong in the metadata of both the source and its derivatives.

Enforce security boundaries outside the model

A document can contain both subject matter and malicious instructions. RAG does not prevent these indirect prompt injections. Source content remains data, not instructions to the system. Permitted actions, document access and network destinations are controlled independently of the language model. This is a central point in OWASP’s treatment of prompt injection.

Tenant isolation, verifiable access filters and tightly scoped access to model and database services are necessary, as is protection against unauthorised extraction of vector data. OWASP’s guidance on vector and embedding weaknesses explains these risks. A convincingly written answer does not prove that access controls worked correctly.

10 / Tools & licensing

A stack is a set of responsibilities, not a single product.

The following selection illustrates possible components. It is neither a pre-validated combination nor an exhaustive list. Adapters, versions, operational requirements and security capabilities must be verified in the chosen configuration. For sensitive data in particular, it matters whether a capability is actually available in the edition being used.

A single “open source” label would be too broad for this kind of stack. Application code, extensions, model weights and hosted services can carry different terms. Freely available model weights are not automatically unrestricted open-source software; they may be subject to their own terms of use. Suitability for the task, licensing and the operating model should therefore be assessed separately.

Even a tool known for local use may include cloud features. A strictly local route requires verified configuration, network rules and control of every service involved. A product name is no substitute for verifying the actual data flow.

Maintainability is part of the selection: before production use, assess ongoing maintenance, security updates, available adapters and a possible migration path. This applies to graph databases, model servers and user interfaces alike. A combination of tools should be treated as a viable architecture only once its specific integration and operation have been verified.

KNIME Analytics Platform

Visual data preparation and analysis workflows that make rules, transformations and integrations traceable.

Assess the platform, extensions and other KNIME products separately for licensing purposes.

Docling

Convert documents, layout and tables into a structured intermediate representation; apply OCR where needed.

Check the code and any models or additional components separately.

LightRAG

Graph-based retrieval and orchestration with separate storage roles for text, vectors, the graph and document status.

Verify backend support and licensing for the selected version; small local stores do not replace an operational plan.

PostgreSQL

Relational storage for structured records, key relationships and queries; extensions can provide additional search capabilities.

Assess the database and extensions separately for licensing, features and operating requirements.

Neo4j

An example of a property-graph database for explicit entities, typed relationships and path queries.

Choose the edition, licence, constraints and operating features required by the project.

Ollama / vLLM

Local model serving: a straightforward starting point or a serving engine configured for the intended operational requirements.

Assess tool and model licences separately; local serving does not establish usage rights.

Streamlit

Internal research and evaluation interfaces. A prototype can make search results and sources transparent and accessible.

Review licensing and the operating model. Sign-in, roles and document-level authorisation are distinct responsibilities.

11 / Quality & operations

Knowledge organisation needs ongoing ownership.

A credible pilot starts with real domain questions and the source passages expected to support the answers. These should include straightforward searches, questions spanning several documents, outdated versions, conflicting statements and deliberately unanswerable questions. Evaluation distinguishes whether the right source was found, whether it supports the answer and whether the system recognises what it does not know.

Alongside answer quality, compare the workflow with the existing approach: time to an evidenced answer, clarification requests, manual transfers and domain-review effort. For agents, add correctly completed tasks, observed approval requirements, duplicate actions and cost per completed task. A faster draft is an improvement only if reviewing it does not create more work. Agree objectives and measurement methods with the business team before the pilot.

Security also needs testing: can someone without permission still learn something through search, the graph or a summary? Does a deleted document stay unavailable? Can a malicious source document trigger an external action? These checks belong in an approval process alongside answer quality, latency and cost per useful request.

If parsers, chunking, the embedding model or the extraction schema change, affected derivatives may need to be regenerated. The pipeline should record which version built each index. A rollback requires consistent data and configuration, not just the previous application version. Monitoring must not create an uncontrolled second knowledge store containing complete prompts and answers.

A good starting point is a clearly bounded collection with known owners. First, establish reliable data quality, access rights and basic search. Add graph relationships where the domain questions require them. Then assess a cloud route using approved contexts and specific quality or operational requirements. This allows the system to grow from a verifiable core, rather than from the longest possible list of tools.

Beyond individual answers, assess the knowledge foundation itself: which priority domains are covered? Which resources lack owners, current versions or permission information? How quickly are changes reflected? How often do terms or relationships remain unresolved? These measures reveal maintenance needs; they do not prove that all company knowledge has been captured.

Business knowledge becomes usable when resources are organised, meaning is shared and relationships are maintained with clear ownership. Databases, search indexes, models and agents fulfil different roles within that structure.

Editorial context

This article combines established concepts in data preparation, knowledge modelling and AI integration with an editorial reference architecture from Scalevity. Its legal discussion concerns the GDPR and German copyright law. A specific implementation requires review of the selected versions, terms of use and project requirements.

The interactive examples use synthetic data only. No models are called and no input is transmitted.

Related perspective

Read next: AI agents in the enterprise

How approved knowledge becomes a controlled workflow, from task selection and tools to approvals and ongoing operations.

Read the article

How can distributed resources become a shared knowledge foundation?

We connect knowledge architecture, data preparation and technical integration through clear ownership, appropriate data models and a controlled path into operation.

Discuss a project