Cortessa turns a corpus of sensitive documents into a question-answering instrument — every answer cited back to its source, running entirely inside your boundary. No cloud. No server estate. No data movement to justify. Built for the organisations whose most valuable documents are the ones they can never upload: defence primes, banks, nuclear operators, clinical and research institutions.
WINDOWS · MACOS / RUNS WITHOUT INTERNET ACCESS / NOTHING LEAVES THE MACHINE
Design authority records. Safety cases. Model governance files. Clinical protocols. Export-controlled engineering data. The organisations that would benefit most from AI-assisted document search are exactly the ones that cannot send a single page to a cloud service — and shouldn't have to.
Cortessa was engineered for that constraint from the first line of code. The entire pipeline — extraction, indexing, retrieval, answering, audit — runs on the machine in front of you. In its default mode it makes no network connection at all, and it never states anything it cannot quote.
The AI proposes. The engineer decides. Cortessa design principle
Everything Cortessa produces is grounded in your documents and cited to the passage that supports it — whether you're asking a question, hunting contradictions, or drafting the document that goes up for signature.
Ask questions in plain language across thousands of documents. Answers arrive with verbatim cited passages — revision-aware, so a superseded standard is flagged before it reaches your work, not after.
GUARANTEED & AI-ASSISTED MODES · CERTIFIED-ONLY FILTER
A cross-document sweep that surfaces where your own documentation disagrees with itself — conflicting values, superseded revisions still in circulation, inconsistent parameters — as an exportable findings list, before a regulator or a customer finds them for you.
DETERMINISTIC TIER · EVAL 25/25 · 0 FALSE POSITIVES
Most vendors claim their AI "doesn't hallucinate". That claim is provably impossible for any generative model — and buyers in regulated sectors know it. Cortessa is built as a two-speed instrument, and tells you plainly which promise applies to every answer.
Every word shown is a verbatim, cited quote from your approved documents. When Cortessa has no supporting quote, it abstains. No language model is in the loop — so fabrication is not merely unlikely, it is architecturally impossible.
When you authorise it, Cortessa drafts fluent, cited prose grounded in the retrieved documents. Every generated answer passes a deterministic faithfulness gate before you see it — checking every number, unit, document ID and citation against the sources.
Point Cortessa at a folder — PDFs (digital and scanned), Word, PowerPoint, Excel, emails, plain text. Minutes later you're asking questions of the whole corpus.
Battle-tested extractors strip every supported format to clean text. Scanned pages are detected and OCR'd individually — digital pages never touch OCR.
Documents are chunked and indexed locally. Every chunk carries provenance — source file, hash, extraction method — and an optional certification flag.
Hybrid retrieval finds the passages that answer your question. Misses fail safe: a refusal or a visibly irrelevant quote, never a fabrication.
Guaranteed mode shows verbatim cited quotes. Assisted mode drafts cited prose — then the faithfulness gate verifies every claim against its source.
A manifest records every file, every extraction, every answer. Cross-document audit mode surfaces contradictions between your own documents.
Captured from a live Cortessa session over the demonstration corpus, running in fully offline extractive mode. Note the classification ribbon: the active answer engine and the data-handling ceiling are always visible, on every screen.
Built for the primes and tier-one operators in regulated sectors — designed for OFFICIAL-tier and sensitive-but-unclassified workflows today, with an accreditation pathway for higher-assurance deployments.
Interrogate design authority records, standards, MSDS sheets and legacy programme documentation inside the wire. Runs on a standalone terminal in a secure facility — no server estate, no connectivity requirement, no data movement to justify to your security officer.
Safety cases, operating procedures and decades of site records become searchable with verbatim, cited answers — and a cross-document audit mode that flags where your own documents contradict each other before a regulator does.
Model governance records, policy manuals, counterparty files and committee minutes — material that cannot leave your control boundary under your own policies, let alone your regulator's. Interrogate it in place, with every answer traceable to the governing document and its current version.
Clinical protocols, regulatory submissions and trial documentation stay inside your governance boundary. Every answer is traceable to the exact source passage — the traceability your quality system already demands.
Grant archives, lab records and unpublished results interrogated locally, with provenance on every chunk. Pre-publication material never leaves the building — or the laptop.
Casework, procurement records and policy archives interrogated on the desk they already sit on. No new data-sharing agreement, no cloud assessment, no procurement of infrastructure — the deployment footprint is a single executable.
The full evaluation suite ships with the product and runs offline. Your security and quality teams can reproduce every number — on your hardware, against your corpus, without our involvement.
A deterministic, offline check on every AI-generated answer: numeric and unit fidelity, citation validity, lexical support. No LLM in the gate itself, so it runs identically in air-gapped deployments.
POLICY KNOB: FLAG / SUPPRESS / REFUSE
Every indexed chunk carries its source file, content hash, extraction method and timestamp. Every extraction run produces a manifest — your audit trail and your triage queue in one artefact.
SHA-256 CONTENT ADDRESSING THROUGHOUT
The generative tier is stress-tested with counterfactual number-swaps, presupposition baits and poisoned distractors — not padded with easy questions. Bounds are reported by the rule of three, at 95% confidence.
EVIDENCE PACK AVAILABLE ON REQUEST
Cortessa runs from a folder — or a USB stick. Put your documents in a documents folder beside it, launch, and ask. Every download includes a 30-day evaluation licence on your own documents, on your own hardware — then continue under a Professional or Site licence.
Download, place beside your documents folder, and double-click. The index builds locally and the interface opens in your browser at localhost — no traffic leaves the machine.
Download for WindowsmacOS applications must be compiled on a Mac, so we ship the complete, verified build kit: unzip, run one command, and it produces Cortessa.app from source you can read. Identical engine to Windows, byte-for-byte verified.
Download for macOSActivation is by offline licence key — a signed key you paste in or drop beside the application. No account, no activation server, no phone-home: the key verifies cryptographically on the machine, so licensed copies run in fully air-gapped facilities. Verify the published checksum after removable-media transfer, and contact us for the signed evidence pack to support your internal software approval process.
Cortessa is not a subscription to someone else's cloud — it is a sovereign capability your organisation owns and operates inside its own boundary, with an assurance case behind every answer. It is priced accordingly, and it still costs less than one afternoon of a fabricated number reaching a safety case.
All prices exclude VAT. Every licence begins with a structured 30-day evaluation on your own documents. AI-assisted mode uses your own Anthropic API key or AWS Bedrock tenancy — inference costs stay under your control and your agreements. Volume and multi-year terms available for programme-scale deployments.
Thirty minutes with your documents will tell you more than this page can. Bring a folder. We'll bring Cortessa.
We run briefings on-site or remote, including fully offline demonstrations on your own hardware. The technical paper, TRL evidence pack and one-page capability sheet are available on request.