Architecture
RAG Pipeline
- User query received
- Authorization: verify user owns referenced data
- Semantic search over user's financial documents
- Context injected into prompt
- Bedrock generates response
- Response audited
Security
- User data isolation: Queries scoped to authenticated user's data only
- Prompt injection defense: Input sanitization, system prompt hardening
- Hallucination mitigation: Ground responses in retrieved data, cite sources
- Auditability: All queries and responses logged
Example Queries
- "Why did my portfolio performance decrease?"
- "What are my highest-performing investments?"
- "Compare my portfolio against the benchmark."
- "Why was this transaction flagged?"
- "Summarize my monthly spending."
- "Explain this portfolio's risk."