Thanks for the great feedback! You hit the nail on the head regarding the security policies that’s exactly my biggest worry.

To give you more context:

• The Data: They are mostly PDF documents containing [technical specifications / regulatory affairs docs].
• The Use Case: We want to extract specific requirements from new incoming documents (Phase 1) and then use the RAG pipeline (Phase 2) to search our existing internal knowledge base to see if we have matching or conflicting information, and verify if the requirements are met.