Document intelligence for sensitive environments
Cortessa mark CORTESSA CLYDESIDE DIGITAL
Offline · Air-gapped · Every answer cited

Document intelligence you can put your name to.

Cortessa turns a corpus of sensitive documents into a question-answering instrument — every answer cited back to its source, running entirely inside your boundary. No cloud. No server estate. No data movement to justify. Built for the organisations whose most valuable documents are the ones they can never upload: defence primes, banks, nuclear operators, clinical and research institutions.

WINDOWS · MACOS  /  RUNS WITHOUT INTERNET ACCESS  /  NOTHING LEAVES THE MACHINE

500 / 500
Blind problems solved across a 100-document, 21-format stress set
GRADED BY INDEPENDENT AI JUDGE
0
Fabrications possible in guaranteed mode — an architectural property, not a test result
EXTRACTIVE PATH · BY CONSTRUCTION
< 0.09%
Measured hallucination bound in AI-assisted mode, at 95% confidence
0 / 3,220 ADVERSARIAL TRIALS
100%
Offline. Index, retrieve and answer with the network cable unplugged
SINGLE EXECUTABLE · ~75 MB
01 The problem

Your most valuable documents are the ones you can never upload.

Design authority records. Safety cases. Model governance files. Clinical protocols. Export-controlled engineering data. The organisations that would benefit most from AI-assisted document search are exactly the ones that cannot send a single page to a cloud service — and shouldn't have to.

Cortessa was engineered for that constraint from the first line of code. The entire pipeline — extraction, indexing, retrieval, answering, audit — runs on the machine in front of you. In its default mode it makes no network connection at all, and it never states anything it cannot quote.

The AI proposes. The engineer decides. Cortessa design principle
02 The instrument set

Three instruments. One corpus. One standard of evidence.

Everything Cortessa produces is grounded in your documents and cited to the passage that supports it — whether you're asking a question, hunting contradictions, or drafting the document that goes up for signature.

ASK

Interrogate the corpus

Ask questions in plain language across thousands of documents. Answers arrive with verbatim cited passages — revision-aware, so a superseded standard is flagged before it reaches your work, not after.

GUARANTEED & AI-ASSISTED MODES · CERTIFIED-ONLY FILTER

AUDIT

Find the contradictions

A cross-document sweep that surfaces where your own documentation disagrees with itself — conflicting values, superseded revisions still in circulation, inconsistent parameters — as an exportable findings list, before a regulator or a customer finds them for you.

DETERMINISTIC TIER · EVAL 25/25 · 0 FALSE POSITIVES

AUTHOR

Draft with evidence attached

Produces briefing drafts and summaries grounded in the corpus, with a citation on every claim, exported as a working document for human review and sign-off. The draft is the machine's; the signature is yours.

CITED .DOCX EXPORT · HUMAN SIGN-OFF BY DESIGN

03 Two speeds, one honest guarantee

A guarantee where a guarantee is possible. A measured bound where it isn't.

Most vendors claim their AI "doesn't hallucinate". That claim is provably impossible for any generative model — and buyers in regulated sectors know it. Cortessa is built as a two-speed instrument, and tells you plainly which promise applies to every answer.

Guaranteed mode · Default

Zero fabrication, by construction

Every word shown is a verbatim, cited quote from your approved documents. When Cortessa has no supporting quote, it abstains. No language model is in the loop — so fabrication is not merely unlikely, it is architecturally impossible.

  • Fully air-gapped — zero network traffic, ever
  • A retrieval miss becomes a refusal, never a confident false statement
  • Deterministic and auditable — same corpus, same answer, every time
  • Certified-only filter — restrict answers to approved content
RESIDUAL RISK: EXTRACTION FIDELITY + RETRIEVAL RECALL — BOTH MEASURED, BOTH FAIL SAFE
Assisted mode · Opt-in

Bounded, gated, human-signed

When you authorise it, Cortessa drafts fluent, cited prose grounded in the retrieved documents. Every generated answer passes a deterministic faithfulness gate before you see it — checking every number, unit, document ID and citation against the sources.

  • Retrieval-gated generation — only your snippets and question are used
  • Every quantity verified — a fabricated "45 bar" or "Rev C" is caught offline
  • Fabricated citations blocked; unsupported sentences flagged, suppressed or refused — your policy
  • Mandatory human sign-off on every answer
MEASURED RESIDUAL: <0.09% AT 95% CONFIDENCE (0 FAILURES / 3,220 ADVERSARIAL TRIALS). NEVER CLAIMED AS ZERO.
Why we say it this way No generative model can be guaranteed never to hallucinate — this is a published theoretical limit, not an engineering gap. Vendors who claim zero are telling you something about their marketing, not their system. Cortessa sells the guarantee where it can be made true by construction, and reports an honest, shrinking, independently reproducible bound everywhere else. Your assurance case inherits numbers you can defend.
04 How it works

From a folder of files to a defensible answer.

Point Cortessa at a folder — PDFs (digital and scanned), Word, PowerPoint, Excel, emails, plain text. Minutes later you're asking questions of the whole corpus.

STAGE 01

Extract

Battle-tested extractors strip every supported format to clean text. Scanned pages are detected and OCR'd individually — digital pages never touch OCR.

STAGE 02

Index

Documents are chunked and indexed locally. Every chunk carries provenance — source file, hash, extraction method — and an optional certification flag.

STAGE 03

Retrieve

Hybrid retrieval finds the passages that answer your question. Misses fail safe: a refusal or a visibly irrelevant quote, never a fabrication.

STAGE 04

Answer & cite

Guaranteed mode shows verbatim cited quotes. Assisted mode drafts cited prose — then the faithfulness gate verifies every claim against its source.

STAGE 05

Audit

A manifest records every file, every extraction, every answer. Cross-document audit mode surfaces contradictions between your own documents.

05 The instrument in use

This is the real interface, on real documents — not a mock-up.

Captured from a live Cortessa session over the demonstration corpus, running in fully offline extractive mode. Note the classification ribbon: the active answer engine and the data-handling ceiling are always visible, on every screen.

ASK · GUARANTEED MODE — VERBATIM, CITED, CURRENT-REVISION AWARE
Cortessa answering a question about the MS-100 pipe coupling with verbatim cited passages, distinguishing the current Revision C standard from the superseded Revision A
Asked for the MS-100's maximum operating pressure, Cortessa quotes the exact parameter table — and separates Revision C (current) from Revision A (superseded), flagging the withdrawal notice. The wrong-revision answer is the one that reaches a safety case; this is the screen that stops it.
HOME · AIR-GAPPED SESSION
Cortessa home screen showing the Ask console with suggested questions and the offline extractive classification ribbon
The working surface: Ask, Audit, Author and Library, with the corpus inventory and answer-engine selector in the rail. Offline index, nothing leaves the device.
LIBRARY · CERTIFICATION CONTROL
Cortessa library screen listing the indexed documents with per-document certification toggles
Every indexed document, with per-document certification toggles — restrict answers to approved, current content with one switch, per question or corpus-wide.
06 Who it's built for

Engineered for the environments where "just use the cloud" is not an answer.

Built for the primes and tier-one operators in regulated sectors — designed for OFFICIAL-tier and sensitive-but-unclassified workflows today, with an accreditation pathway for higher-assurance deployments.

DEF / 01

Defence & aerospace primes

Interrogate design authority records, standards, MSDS sheets and legacy programme documentation inside the wire. Runs on a standalone terminal in a secure facility — no server estate, no connectivity requirement, no data movement to justify to your security officer.

NUC / 02

Nuclear & critical infrastructure

Safety cases, operating procedures and decades of site records become searchable with verbatim, cited answers — and a cross-document audit mode that flags where your own documents contradict each other before a regulator does.

FIN / 03

Banking & financial services

Model governance records, policy manuals, counterparty files and committee minutes — material that cannot leave your control boundary under your own policies, let alone your regulator's. Interrogate it in place, with every answer traceable to the governing document and its current version.

MED / 04

Medical & life sciences

Clinical protocols, regulatory submissions and trial documentation stay inside your governance boundary. Every answer is traceable to the exact source passage — the traceability your quality system already demands.

SCI / 05

Scientific & research institutions

Grant archives, lab records and unpublished results interrogated locally, with provenance on every chunk. Pre-publication material never leaves the building — or the laptop.

GOV / 06

Government & regulated industry

Casework, procurement records and policy archives interrogated on the desk they already sit on. No new data-sharing agreement, no cloud assessment, no procurement of infrastructure — the deployment footprint is a single executable.

07 Assurance engineering

Every claim on this page maps to a test you can run yourself.

The full evaluation suite ships with the product and runs offline. Your security and quality teams can reproduce every number — on your hardware, against your corpus, without our involvement.

The faithfulness gate

A deterministic, offline check on every AI-generated answer: numeric and unit fidelity, citation validity, lexical support. No LLM in the gate itself, so it runs identically in air-gapped deployments.

POLICY KNOB: FLAG / SUPPRESS / REFUSE

Provenance on everything

Every indexed chunk carries its source file, content hash, extraction method and timestamp. Every extraction run produces a manifest — your audit trail and your triage queue in one artefact.

SHA-256 CONTENT ADDRESSING THROUGHOUT

Adversarial evaluation

The generative tier is stress-tested with counterfactual number-swaps, presupposition baits and poisoned distractors — not padded with easy questions. Bounds are reported by the rule of three, at 95% confidence.

EVIDENCE PACK AVAILABLE ON REQUEST

08 Evaluate Cortessa

One download. No installer. No account.

Cortessa runs from a folder — or a USB stick. Put your documents in a documents folder beside it, launch, and ask. Every download includes a 30-day evaluation licence on your own documents, on your own hardware — then continue under a Professional or Site licence.

Windows 10 / 11 · x64

Cortessa for Windows

Cortessa.exe · 75 MB · single portable executable

Download, place beside your documents folder, and double-click. The index builds locally and the interface opens in your browser at localhost — no traffic leaves the machine.

Download for Windows
SHA-256 ecee8f3f4e1eea61a3a5956f391606f8dc4fb187c26edd7e1410e23b76971f7d
macOS 12+ · Apple Silicon & Intel

Cortessa for macOS

Cortessa-macOS.zip · 231 KB build kit · compiles on your Mac

macOS applications must be compiled on a Mac, so we ship the complete, verified build kit: unzip, run one command, and it produces Cortessa.app from source you can read. Identical engine to Windows, byte-for-byte verified.

Download for macOS
SHA-256 4df90e186d86884bcda16079e24196a65332b737901724549a73c09cd94ccbdc

Activation is by offline licence key — a signed key you paste in or drop beside the application. No account, no activation server, no phone-home: the key verifies cryptographically on the machine, so licensed copies run in fully air-gapped facilities. Verify the published checksum after removable-media transfer, and contact us for the signed evidence pack to support your internal software approval process.

09 Pricing

Priced as the instrument it is.

Cortessa is not a subscription to someone else's cloud — it is a sovereign capability your organisation owns and operates inside its own boundary, with an assurance case behind every answer. It is priced accordingly, and it still costs less than one afternoon of a fabricated number reaching a safety case.

Site Licence
£45,000
PER FACILITY / YEAR · UNLIMITED USERS
  • Everything in Professional, site-wide
  • Air-gap deployment pack for removable-media transfer
  • Signed evidence pack for software approval
  • Deployment assistance & admin training
  • Named support engineer
  • Annual assurance re-evaluation on your corpus
Talk to us
Enterprise & Accredited
POA
MULTI-SITE · HIGHER ASSURANCE
  • Accreditation support for higher-assurance environments
  • On-device model options — AI answers with zero connectivity
  • Custom extractors & corpus rules for your document estate
  • Source escrow & security review access
  • Integration engineering
  • Programme-scale commercial terms
Request a briefing

All prices exclude VAT. Every licence begins with a structured 30-day evaluation on your own documents. AI-assisted mode uses your own Anthropic API key or AWS Bedrock tenancy — inference costs stay under your control and your agreements. Volume and multi-year terms available for programme-scale deployments.

10 Contact

Thirty minutes with your documents will tell you more than this page can. Bring a folder. We'll bring Cortessa.

We run briefings on-site or remote, including fully offline demonstrations on your own hardware. The technical paper, TRL evidence pack and one-page capability sheet are available on request.

Company Clydeside Digital
Based Glasgow, Scotland, UK
Materials Technical paper · TRL evidence pack · capability one-pager