Enterprise AI
What Is Enterprise RAG?
Retrieval augmented generation is the technique behind almost every useful enterprise AI assistant. It is also the part organizations understand least well, because the name describes the mechanism rather than the point....
Secure RAG Architecture
A retrieval system is a search engine that answers in sentences, and that changes its security properties in one specific way: search returns links a user can be denied, while generation returns prose that has already be...
RAG vs Fine-Tuning
Two ways to make a general model useful for your organization. Retrieval finds relevant material and supplies it with the question. Fine tuning continues training the model on examples so its behavior changes.
They are ...
What Is a Private LLM?
Private LLM is a phrase used to mean at least five different arrangements, and they do not offer the same guarantees. Because it is a marketing term rather than a technical one, the only reliable way to understand a clai...
Open-Source vs Proprietary LLMs
The question is usually asked as open source against proprietary, and the first useful answer is that most models described as open source are not open source. They are open weights, which is a different and considerably...
Vector Databases and Enterprise AI
A vector database stores the numerical representations that make meaning based search possible, and answers the question of which stored items are nearest to a query. That is genuinely all it does. The engineering intere...
Secure Generative AI for Business
Generative AI arrives in an organization whether or not anyone approves it. By the time the question reaches a security team, the useful version of it is rarely whether to allow it, but how to make the allowed path bette...
Protecting Sensitive Data When Using AI
An AI system is a new set of paths in and out of your information. Most of the work of protecting data around one is not novel: it is knowing which paths exist and putting a control on each. What is novel is that several...
AI Identity and Access Management
The governing principle is one sentence, and almost every failure in this area is a departure from it. An AI system must not become a way around the authorization model an organization already has.
That sounds obvious. ...
Securing Enterprise AI APIs
An AI environment is a set of APIs. The model is reached over one, the retrieval service exposes another, the connectors consume half a dozen more, and anything the system can act on is reached the same way.
Which means...