How it works · The full pipeline, explained

From documentto decision.

See exactly how Normax turns contracts, GDPR policies and operating procedures into compliance answers with a verifiable source. Document-grounded AI for European businesses, with no black box and no marketing claims—only the architecture.

Pipeline

5 stages

Hallucinations

0 by design

Citations

Always

First answer

< 5 min

5-stage pipeline · Source-cited answers · EU* hosting

Your three steps

What you do.
What Normax does behind it.

Three actions to move from a corpus of static documents to operational compliance answers. Each step takes minutes, not days. No technical setup, no APIs to configure, no IT consultant required.

normax-chat
Active step · 01
📂 upload/
├── Privacy_Policy_v3.pdf ✓ indexed
├── Records_of_Processing.docx ✓ indexed
├── HR_Procedures_v2.pdf ⏳ indexing
└── Vendor_Contracts/ (3 files)
 
🔒 Tenant isolation: enabled
🌍 Region: EU*
🛡 Encryption at rest: managed

What happens behind

  • Server-side parsing extracts text, tables and structure.
  • Documents are sliced into compliance-aware passages.
  • Each passage gets a vector embedding for semantic search.
  • Embeddings are stored in a per-tenant isolated index.
Under the hood · 5 stages

The compliance AI pipeline.
No black box.

Normax is a Retrieval-Augmented Generation (RAG) system tuned for Italian and European compliance. Five stages designed so the model can never answer outside your documents. Every step is observable, every output is traceable.

Pipeline progressActiveIdle

0

answers without grounded source

100%

of citations re-verified

EU*

data services region

Anatomy of an answer

Every answer has a shape.
Designed for compliance.

A Normax answer is not a wall of text. It is a small operational document: a thesis you can act on, evidence with citations, recommended actions and verifiable sources. Designed for compliance officers, HR, legal, tax and operations teams.

normax-chat / sample
citations verified5 markers

Legend · 5 markers

A · Thesis
Your first day · Time-to-value

From zero to the first
source-cited answer.

Most compliance tools take weeks to install, configure and train. Normax was built so a non-technical user can move from sign-up to a useful answer in under five minutes—and onboard the whole team within the first day.

Onboarding progress0%
  1. 00:00

    Account created

    Sign up with email or SSO. EU* workspace provisioned.

  2. 00:30

    First document uploaded

    Drag-and-drop a contract, policy or procedure.

  3. 02:00

    Indexing complete

    Passages parsed, embedded, stored in the tenant index.

  4. 03:00

    First question asked

    A real operational question, written naturally.

  5. 03:15

    First answer with source

    Thesis, evidence, action and citations delivered.

  6. Day 1

    Team invited

    Roles assigned, per-folder permissions configured.

See how Normax thinks

Three scenarios.
Three minutes per answer.

How Normax handles the questions compliance, HR, legal and tax teams ask most often. Each scenario shows the question, the documents Normax reaches for and the structured answer—with source.

GDPR audit prep

Are we ready for a GDPR audit on customer data retention?

Documents consulted

  • Privacy_Policy_v3.pdf
  • Records_of_Processing.docx
  • ISO_27001_Policy.pdf
Legacy

≈ 4 hours

Reading 3 documents manually

Normax

≈ 90 seconds

Cited, structured answer

Normax responseGrounded
  1. 01Thesis: 36-month retention compliant with GDPR Art. 5(1)(e).
  2. 02Evidence: Privacy_Policy_v3 §4.2 + Records_of_Processing §3.1.
  3. 03Risk: IT access logs not covered by a specific policy.
  4. 04Action: add SysAdmin log clause (6 months) within 30 days.
  5. 05Sources: 3 files cited, all click-verifiable.
What Normax is not

Honest about the edges.
Trust without overselling.

Compliance is too serious for marketing claims. Here are the explicit limits Normax accepts by design. If a tool reads your contracts and policies, you should know what it will not do.

Not a legal advisor

Normax surfaces what your documents say. It does not replace lawyers, accountants or labour advisors for binding opinions.

Not a search engine on the open web

By default, Normax does not browse the internet. Public sources are integrated only when web search is explicitly enabled in chat.

Not an unsupervised automation

The agent proposes, you approve. No emails sent, no files mutated, no external actions taken automatically.

Not a black box

Every answer points to file, section and paragraph. If no source matches, Normax explicitly says so—no fabrication.

Not training on your content

Customer documents are not used to train general-purpose models. Your corpus stays inside your tenant.

Not a replacement for your DMS

Normax adds reasoning and citations on top of the documents you already have. It does not require you to abandon your storage.

Frequently asked questions

How does it work,
really?

Normax uses a Retrieval-Augmented Generation (RAG) architecture tuned for compliance. The model only sees the passages retrieved from your documents and is constrained to cite them. Before the answer reaches you, citations are re-verified against the index. If no internal source matches, Normax explicitly says so instead of inventing.

Files leave your browser over HTTPS toward EU* Firebase Storage. Indexing runs server-side in an isolated environment. When you ask a question, only the retrieved passages—not your whole corpus—are sent to the AI provider over protected channels. Full provider and region details are in the Terms and DPA.

PDF, Word (DOCX), Markdown, TXT and RTF—uploaded and indexed automatically. No conversion, no proprietary format, no IT setup required. Folders and per-folder permissions are supported out of the box.

Most compliance documents are indexed in seconds to a few minutes, depending on size and format. Indexing happens once at upload; subsequent questions on the same file are answered in real time.

Yes. Every answer exposes the file, section and paragraph it comes from. The cited passage is one click away inside Normax, and can be opened directly in the source file. Designed for compliance audits and internal review.

When you delete a file, its indexed passages are removed and become unavailable for future answers. Past conversations keep their reference for audit purposes but no longer surface the deleted content as a source.

A general assistant answers from pre-trained knowledge and may fabricate. Normax answers only from your documents, cites the exact paragraph, runs on EU* hosting, supports multi-user roles and permissions, and does not use your content to train general-purpose models. It is purpose-built for Italian and European compliance.

Yes. By default, all answers come exclusively from your documents. Web search is opt-in per chat: when you enable it, Normax can integrate public sources (regulator circulars, legislative updates) and always labels them as external, distinct from your internal documents.

Yes. Normax is a multi-user workspace with roles (Owner, Admin, Member, Guest), per-folder permissions, shared history and audit log. HR sees HR, legal sees legal—no shadow IT, no internal leaks.

Agent Mode handles complex requests where multiple documents must be cross-referenced. It plans a sequence of steps, retrieves the right passages, synthesises a structured answer and flags misalignments. Scope, sources and steps are always visible—nothing runs silently in the background.

Now you know
exactly how it works.

Try it on your real documents. Upload a policy, ask an operational question, get a source-cited answer in under five minutes—no credit card, no IT consultant, no black box.

2-minute setup · No credit card · EU* hosting