Administration and security: the controls your IT needs.
Who may see what, who changed what, how long is data kept? RAGSuite answers these questions with roles and teams, two-factor sign-in, an audit log and deletion periods, in the Cloud in Germany and on your own server.
2FA and system status in every plan · roles, teams and full audit log in Cloud and Enterprise
Roles, teams and sign-in: who may do what?
The Community Edition has two roles, admin and member, and sign-in with email and password. In the Cloud in Germany and in Enterprise you set up organisation, teams and roles and share projects selectively. Google sign-in is added on top.
Access rights from source systems such as SharePoint are not carried over automatically; you separate content by project.
Secure in every plan.
Two-factor sign-in
2FA for every account, in the Community Edition too.
Session management
See and end active sessions, set a session timeout.
Sign-in notifications
A notice for new sign-ins to the account.
System status
Live status for gateway, PostgreSQL, Redis and vector store.
The audit log: who did what, and when?
The audit log records every action with event type, user, project, action and severity. The Community Edition shows the last 15 days. In the Cloud in Germany and in Enterprise the log is complete, can be filtered and exported for internal audit, data protection and supervisors.
| Time | User | Action |
|---|---|---|
| 24 Sep 09:14 | a.weber | Source added |
| 24 Sep 08:52 | a.weber | Role changed |
| 23 Sep 17:30 | p.neumann | Model switched |
| 23 Sep 11:05 | a.weber | Retention changed |
| 22 Sep 16:48 | l.hoffmann | Sign-in |
| 22 Sep 10:12 | a.weber | Export created |
Store, delete, prove.
Conversation storage can be switched off for chat and search separately. Automatic deletion periods remove old history, with receipts. In the Cloud in Germany and in Enterprise, retention rules per source and compliance exports are added.
Separating content cleanly: how admins set up projects.
In RAGSuite, projects are the boundary for knowledge. Each project has its own sources, settings and widgets. That ensures a team only gets answers from content it is allowed to see.
Define the cut
One project per team or confidentiality level, such as “All staff”, “HR”, “Management”.
Assign sources
Only the libraries, spaces and files that all users of the project may see.
Grant access
Assign teams and roles to the project, in Cloud and Enterprise.
Review
Ask test questions and check in the audit log who accesses what.
What is in which plan?
| Feature | Community | RAGSuite Engine | Enterprise |
|---|---|---|---|
| 2FA, sessions, sign-in notifications | ✓ | ✓ | ✓ |
| System status | ✓ | ✓ (run by RAGSuite) | ✓ |
| Roles | admin and member | roles, teams, project access | roles, teams, project access |
| Sign-in | email and password | ||
| Audit log | last 15 days | full, filters, export | full, filters, export |
| Storage off, deletion periods | ✓ | ✓ | ✓ |
| Retention per source, compliance exports | – | ✓ | ✓ |
Questions about administration and security.
What security comes with the free edition?
The Community Edition includes two-factor sign-in, session management with ending active sessions, sign-in notifications, system status and an audit log of the last 15 days. Switchable storage and deletion periods are included too. Roles and teams, Google sign-in and the full audit log come with Cloud and Enterprise.
Does RAGSuite support single sign-on?
In the Cloud in Germany and in Enterprise, users sign in with their Google account. We only list further directory integrations once they are available. Ask us about the current status for your environment. You control roles, teams and project access directly in RAGSuite in both plans.
How detailed is the audit log?
Every entry contains event type, user, project, action and severity. The Community Edition shows the last 15 days. In the Cloud in Germany and in Enterprise the log is complete, can be filtered by these fields and exported, for example for internal audit or data protection.
Can we enforce retention periods?
Yes. In every plan you can switch conversation storage off and set automatic deletion periods. In the Cloud in Germany and in Enterprise, retention rules per source and compliance exports are added. That way you implement your deletion concept directly in the platform and can prove it.
Are permissions carried over from SharePoint or Confluence?
Not automatically today. So separate content by project: each project has its own sources and settings. Only add to a project what all its users may see. In the Cloud in Germany and in Enterprise you also decide which teams can access which project.
The controls your IT asks for.
We show you roles, audit log and deletion periods in a demo, or try it yourself in the Cloud in Germany.