INDUSTRIES·FOR ENTERPRISE ARCHITECTS · CIO · CDO · CISO

AI ON YOUR
DATA.

Regulated enterprises deploy XERJ inside their perimeter. Same ~36 MB binary — different compliance posture per industry. Pick a vertical below. Every page is a real deployment pattern, the compliance matrix that goes with it, and the measured outcomes.

FOUR VERTICALS·ONE PLATFORM
01 · FINANCIAL SERVICES BANKS · INSURERS ·
ASSET MANAGERS SR 11-7 model-risk evidence. DORA data residency. Fraud similarity inside the payment-authorization budget. Analyst RAG over research corpora. All on one platform, inside your VPC. SELF-HOSTED · BYOK · SR 11-7 ALIGNED
SUB-SECOND SIEM TOP-N · EXACT TERMS AGGS
PCI · GDPR · DORA INHERITED FROM SELF-HOSTED EXPLORE FINSERV → 02 · PUBLIC SECTOR GOVERNMENT ·
DEFENSE ·
INTELLIGENCE Air-gapped enclaves with an operator-staged standard binary in offline lexical mode. Optional local model; adjacent SHA-256 integrity check. FedRAMP + IL5 remain on the roadmap. OFFLINE DEPLOYMENT · NO RUNTIME TELEMETRY/UPDATE/LICENSE CALLS
OPTIONAL LOCAL MODEL · OPERATOR-STAGED RELEASE
NIST 800-53 / AI RMF CROSS-WALK EXPLORE PUBLIC SECTOR → 03 · HEALTHCARE & LIFE SCIENCES HEALTH SYSTEMS ·
PHARMA RESEARCH PHI never leaves the perimeter. HIPAA BAA available on Enterprise. Ambient-scribe retrieval < 40 ms keeps up with the clinical workflow. Imaging-similarity embeddings live alongside metadata. Trial-matching native. HIPAA-READY · BYOK · TENANT-ISOLATED
HYBRID P95 < 40 MS · CLINICAL BUDGET
PER-QUERY PHI-ACCESS AUDIT BUILT IN EXPLORE HEALTHCARE → 04 · RETAIL & CONSUMER COMMERCE ·
CATALOG ·
SHOPPING AGENTS Hybrid catalog search + conversational shopping agents + fraud + observability on one data plane. Drop-in for the Elasticsearch already backing your commerce stack today. 10 M SKUs ON ONE NODE · SQ8
HYBRID SEARCH < 40 MS · PAGE-RENDER BUDGET
PCI · GDPR · CCPA · LGPD INHERITED EXPLORE RETAIL →
ACROSS EVERY INDUSTRY·ONE PLATFORM

SAME BINARY.
DIFFERENT POSTURE.

XERJ ships one ~36 MB binary. What varies by vertical is the deployment topology, the compliance matrix, and the audit expectations. The engine is identical. The runbooks are shared.

SELF-HOSTED
Your cloud · your VPC · your metal · your SCIF. No outbound data path unless you configure one. No vendor in your data path.
DROP-IN ES 8.13
Same client libraries. Same query DSL. Same _bulk API. Your existing ingest pipelines and dashboards work unchanged.
PER-QUERY AUDIT
Every retrieval produces a structured explain-plan — principal, query, rows, cost. Queryable as a regular index. Model-risk evidence for free.
BYOK
Customer-managed keys via AWS KMS · GCP KMS · Azure Key Vault · HashiCorp Vault · Thales Luna HSM. No XERJ-side plaintext access.
OFFLINE DEPLOYMENT
Standard binary · offline lexical mode · operator-staged archive + adjacent .sha256 integrity only · optional local model · no runtime telemetry/update/license calls. See the deployment recipe.
OR BROWSE BY SOLUTION →