Industry
Public sector
The question is usually not which model, but whether data leaves the institution at all. In local-model mode, it does not.
What is at stake here.
Outbound connectivity may not be an option
All three services run inside your boundary; the database and audit log stay there.
Citizen data is dense
National IDs and addresses are ordinary content in public-sector correspondence.
Recordkeeping is mandatory
If the audit record cannot be written, the request is not processed; there is no operating off the record.
Why it is not optional
You have no discretion over a citizen's data.
Where a legal duty is the reason, the article is named. No penalty figures and no circular numbers — those change, and a marketing page is the wrong place to be wrong about them.
The duty to take measures is the same here
KVKK art. 12 does not distinguish between controllers. A public body is equally obliged to take appropriate technical and administrative measures.
Where the data is processed is not a preference
In many institutions data has to stay in the country and on the institution's own network. Local-model mode makes that architecturally possible.
Administrative acts get audited
When someone asks what an answer rested on, a chat transcript is not the answer. The record has to carry the reasoning.
Use cases
What actually happens in the day's work.
These are mechanisms, not case studies. Each one is a concrete thing somebody does, and what the chain does about it.
Summarising a citizen application
Situation
A staff member pastes an application and asks for a summary. The text carries identity, address and contact details.
What happens
The fields are masked, the summary is produced, and who processed which application lands in the audit record.
A question about regulation
Situation
A staff member asks what a regulation says. An answer produced without a source could end up underpinning an administrative act.
What happens
With no source the model is not let loose; with one, the answer is verified against exactly the passage it rests on.
An environment with no internet access
Situation
The institution does not allow data to leave its own network.
What happens
In local-model mode the whole chain runs in-house; verification degrades to the lexical fallback but does not disappear.
The answer
Which part of the product responds.
Configuration
Recommended starting posture.
These are starting recommendations; the final policy is written with you during setup.
- Priority entity types
- TR_TCKNTR_VKNADDRESS_TRPHONE_TR
- If the policy cannot be read
- stop
- Deployment
- On-premise or air-gapped
The rules get written together
The rules for this sector are written with you during onboarding: blocked phrases, the competitor list and the entity rules are set against your own processes. Instead of adapting someone else's template, you start with a policy that is genuinely yours — and it goes live only after being tried in the simulation that runs without saving.
Other industries
Let's talk through your own scenario.
In a 30-minute technical session we run your prompts and your policy through it live.