---
title: "QueryLlama — Hosted Document Search & RAG"
description: "Hosted multi-tenant document search — keyword, semantic and hybrid — with per-organization isolation enforced by Postgres Row-Level Security."
url: "https://royalsoftworks.com/products/queryllama/"
source: "https://royalsoftworks.com"
format: "markdown"
note: "Markdown rendering of the HTML page at `url`. Same content, same canonical URL."
---

Hosted document search · early access

# Ask your documents anything. See the source.

QueryLlama searches your organization's documents by keyword, by meaning, or both — and every result points back to the exact file and passage it came from. Strict per-org isolation, enforced at the database layer, not just in application code.

[Join the design-partner program](https://royalsoftworks.com/contact/) See a search

QueryLlama · acme-corp workspace

keyword

semantic

hybrid

›What's our policy on remote-work expense reimbursement?

01 Already built

## One organization can never see another's documents.

Every table carries an organization ID, and Postgres Row-Level Security policies enforce that a query can only return rows belonging to the requesting user's organization — at the database layer. An application bug can't leak across tenants, because the database itself won't return the rows.

For your IT team

- **Isolation** — Postgres Row-Level Security on every multi-tenant table, scoped to org membership
- **Roles** — super\_admin, org\_admin, group\_admin, member, viewer — enforced by the same RLS policies
- **Audit log** — Append-only table; a database trigger blocks UPDATE/DELETE outright

Explore QueryLlama

## What it does, what's built, and what's next.

Search, RAG, BYOLLM and RBAC — each one labeled honestly by build status.

[Features ### Search, RAG and access control Keyword, semantic and hybrid search, question-answering, and 5-role RBAC — by build status. View](https://royalsoftworks.com/products/queryllama/features/)

[Use cases ### By department Legal, HR, support and engineering — what an early-access deployment looks like for each. View](https://royalsoftworks.com/products/queryllama/use-cases/)

[How it works ### Upload to answer The ingestion pipeline, the search engine, and the question-answering layer, end to end. View](https://royalsoftworks.com/products/queryllama/how-it-works/)

[Security ### Isolation by architecture Database-enforced multi-tenancy, RBAC, and the append-only audit log. View](https://royalsoftworks.com/products/queryllama/security/)

[Whitepaper ### Technical reference Architecture, data model, and a capability-by-capability build-status breakdown. View](https://royalsoftworks.com/products/queryllama/whitepaper/)

[FAQ ### Common questions Availability, file types, isolation, BYOLLM, and what's still being built. View](https://royalsoftworks.com/products/queryllama/faq/)

04 Plans

## Planned tiers — shaped by our design partners.

Pricing isn't final. This is the shape we're building toward; design partners get a say in what each tier includes before general availability.

### Free

Evaluate

- Keyword + semantic search
- One workspace
- Community support

### Pro

Planned default

Teams

- Everything in Free
- Hybrid search
- RAG question-answering

### Enterprise

Regulated orgs

- Everything in Pro
- Bring your own LLM
- SSO, full audit log, dedicated support

### Help shape what ships.

We're onboarding a small number of design partners ahead of general availability.

[Join the design-partner program](https://royalsoftworks.com/contact/)