os3.org

What It Is

OS3 positions itself as a “sovereign RAG” platform for high-security environments that cannot use cloud AI or external APIs, such as defense contractors, government agencies, law firms, and healthcare systems. It emphasizes that the full RAG pipeline can run locally in an isolated network, with data, embeddings, and the LLM all kept inside the organization. This makes it suitable for classified, regulated, or audit-heavy knowledge retrieval and document-generation workflows.

Core Capabilities

Architecturally, OS3 uses PHP for the presentation layer, places most business logic in PostgreSQL stored procedures, uses PostgreSQL 18.0 with pgvector for the data layer, and relies on local embeddings and a local LLM for the AI layer. Its core capabilities include hybrid semantic search, deterministic filtering, document generation with verifiable citations, and an encrypted audit chain for every query and result. The site also highlights a two-person integrity mechanism for controlling privileged operations. The public demo focuses on a legal research platform covering materials such as Washington State regulations, constitutional texts, and court opinions.

Pricing and Trial

The official website does not disclose specific pricing, licensing terms, or deployment costs for OS3. It only notes that traditional enterprise subscriptions typically cost USD 5K–10K per user per year, while on-prem deployment can reduce recurring costs. This suggests OS3 is more likely sold through enterprise customization or project-based procurement. The site offers a Live Demo, but there is no clear information on a free trial, free tier, or self-service SaaS signup.

Pros and Cons

Its main strength is a clearly defined security boundary: no external APIs, air-gapped deployment support, and emphasis on compliance requirements such as NIST 800-171, CMMC, HIPAA, and FedRAMP. It also improves audit trustworthiness through an immutable hash chain. Another highlight is its focus on corpus curation: the site says its legal corpus required 200+ hours of cleanup and achieved a 99.84% clean parse rate. The limitations are that public information remains incomplete: it does not specify the exact local models, hardware requirements, API/SDK availability, permission integrations, operations model, or SLA. Performance and quality metrics are mainly self-reported on the official site and lack third-party validation.

Who It’s For and Access from China

OS3 is best suited to professional organizations that need isolated deployment, compliance auditing, and high-quality citations, such as classified legal research, medical guideline retrieval, defense technical document search, and policy compliance verification. For ordinary teams that only need general chat or a lightweight knowledge base, deployment cost and complexity may be relatively high. The official website does not provide information about access from China, and payment methods are also undisclosed. If deploying it in China, teams should carefully confirm network accessibility, contract and payment arrangements, Chinese-language corpus support, local compliance requirements, and alternative private RAG solutions.