INDUSTRY 01·FOR CIO · CDO · CISO · HEAD OF AI · RISK

AI IN
FINANCIAL
SERVICES.

Banks, insurers, and asset managers run AI under the tightest data controls in the world. XERJ is a self-hosted data plane that runs inside your perimeter — full-text, vector, and agent memory on one platform — so the AI transformation never requires sending data to a third-party retrieval vendor.

AI WORKLOADS·PICK WHAT APPLIES
FRAUD / AML PAYMENT-AUTH
BUDGET Vector similarity to historical fraud patterns + keyword filter on merchant / geography. Result inside the payment-authorization latency budget. · vector similarity in the auth budget
· card-adjacent PCI scope · BYOK
· native RRF · no orchestrator
ANALYST RAG RESEARCH · TRADE
TICKETS Hybrid BM25 + vector over research notes, term sheets, client correspondence. Citation fidelity tracked; re-embed on drift. · hybrid BM25 + vector retrieval
· SQ8 int8 scoring precision (opt-in)
· LangChain / LlamaIndex retriever
SIEM UNIFIED
CYBER SOC Fraud, cloud audit, identity, network logs in one index. Sub-second SIEM top-N over millions of events with exact, pre-computed terms aggregations. Detection-as-code runs native. · sub-second top-source-IPs terms agg
· single-node baseline, no JVM
· aggregations often 10×+ faster vs live ES 8.13.4
MODEL RISK SR 11-7
EVIDENCE STORE Every retrieval returns an explain-plan with principal, query, rows, cost. Queryable as a regular index. Audit ready by construction. · per-query audit artifact
· replayable · exportable
· aligns SR 11-7 · EBA · PRA SS1/23
CUSTOMER SERVICE AGENT-ASSISTED
SERVICING Copilots retrieve across transcripts + KB + policy + entitlements. Agent memory scoped per session · time-decay for recent touches. · native session memory · no Redis glue
· token-budget aware retrieval
· per-tenant isolation per line of biz
DEPLOYMENT·PICK A TOPOLOGY

ONE BINARY.
THREE PERIMETERS.

RETAIL BANKING · VPC · PRODUCTION CARDHOLDER ENVIRONMENT · PCI-DSS SCOPED DATA SOURCES fraud events · transaction logs · card-auth streams XERJ CLUSTER · 3-NODE HA · PCI-DSS SCOPED BYOK via AWS KMS · per-tenant indices by product line audit trail replayable · SR 11-7 evidence per retrieval WORKLOADS fraud similarity · AML case retrieval · tx-log SIEM RETENTION 30 d · 90 d · 7 y
CORPORATE & INVESTMENT BANKING · VPC · RESTRICTED DATA SOURCES research notes · term sheets · trade tickets · client correspondence XERJ CLUSTER · 3-NODE HA · ANALYST RAG + SURVEILLANCE hybrid BM25 + kNN · SQ8 quantization · float32 re-rank LangChain retriever · local embedder · no data egress WORKLOADS research RAG · trade-ticket search · compliance surveillance RETENTION 90 d · 1 y · 7 y
RISK & MODEL GOVERNANCE · VPC · MODEL-OPS DATA SOURCES model outputs · feature vectors · validation evidence · audit trails XERJ CLUSTER · 3-NODE HA · MODEL-RISK ARCHIVE explain-plan indexed · every retrieval is an audit artifact replayable audit · exportable to CM · scheduled attestation WORKLOADS SR 11-7 evidence store · validation retrieval · audit queries RETENTION model lifecycle + 7 y
COMPLIANCE·WHAT YOU INHERIT

AUDIT-READY.
BY DEFAULT.

Self-hosted means most regulatory scope is inherited from your existing controls. XERJ supplies the engineered-in posture auditors expect to see in the submission.

SR 11-7 · MODEL RISKPer-query explain-plan = retrieval-layer audit artifact. Replayable, exportable.GA
DORASelf-hosted in-region · no cross-border data transfer · incident reporting via structured auditGA
PCI-DSS v4.0Encrypted at rest (AES-256-GCM) · BYOK · RBAC · tenant isolation · per-query auditINHERITED
EBA · PRA SS1/23Model-risk documentation surface via explain-plan index · decision evidence queryableGA
GDPRSelf-hosted in customer region · right-to-erasure via tombstone + segment compactionGA
SOC 2 TYPE IPlatform controls · access mgmt · incident response · for commercial SaaS trackROAD Q3 2026
ISO 27001ISMS scope covers platform engineering + SaaS operationsROAD Q4 2026
FIPS 140-2AES-256-GCM via KMS · TLS 1.3 · certification roadmapROAD 2027
MEASURED·vs LEGACY RETRIEVAL STACKS

NUMBERS THE
BOARD READS.
ON ONE SLIDE.

METRICXERJLEGACY
Vector kNN k=10 · p500.78 ms2.64 ms (ES 8.13) — 3.39×
Vector memory · 10 M × 1.5 K18 GB92 GB (float32) — 5.1×
On-disk index176 MB283 MB · ES 8.13.4 · 1.61×
Cold start< 1 s~15 s JVM warm-up
Cross-border data egress0 (self-hosted)depends on vendor
Per-query audit artifactnative · explain-planapplication plumbing

On-disk and ingest figures are from the reproducible closed-loop scorecard vs live ES 8.13.4; cold start is sub-second (readiness ~100 ms). The vector kNN row is from the current scorecard (k=10, recall@10 100 %).

TCO impact: ~80 % infrastructure cost reduction on log + search + vector workloads. Most savings come from vendor consolidation: one platform team, one renewal cycle, one SOC 2 audit scope.

PILOT · FINSERV

PROVE IT
IN YOUR VPC.

Two-week CISO-signoff pilot · sanitized data · private binary · architecture + controls review. Mutual NDA available day one; binary delivery does not require one.

We reply within one business day · DOWNLOAD THE FINSERV BRIEF (PDF) ✓ THANKS. CHECK YOUR INBOX WITHIN 24 HOURS.