InnConnect Docs ← Back to InnConnect

InnConnect Documentation

The complete reference for InnConnect — a SaaS web chat platform powered by European AI, with human agents always in control.

InnConnect is a SaaS chat widget that you embed on your website. It answers customer questions from your knowledge base, proposes orders from your product catalog, and suggests appointment bookings — all under human supervision. Your team reviews escalations, confirms proposals, and stays in control. The platform is tuned per business category, hosted entirely within the EU, and designed to meet GDPR, ISO 27001, NEN 7510, BIO, NIS2, DORA, and EU AI Act requirements out of the box.

This documentation covers everything from initial setup to advanced security configuration. Use the sidebar to navigate between sections, or start with the quick-start guide below.

New to InnConnect? Start with the Getting Started guide to go from a fresh account to a live chat widget in five steps.

Documentation

Platform overview

InnConnect is a multi-tenant SaaS platform where each tenant — typically a single organisation — gets a fully isolated environment with its own PostgreSQL database, storage, and encryption keys. Tenants manage one or more sites, each representing a customer-facing channel (a website, a subdomain, a language variant).

The AI pipeline supports multiple providers — including Mistral (European) and Claude — and uses Retrieval-Augmented Generation (RAG) to ground responses in your Knowledge Base content. The chat widget is a single JavaScript embed that works on any website. The admin portal provides role-based access control with seven roles and per-site scoping, so you can give every team member exactly the access they need.

Architecture at a glance

Isolation

Every tenant gets a dedicated PostgreSQL database. Credentials are stored in Kubernetes Secrets, not in application config. Object storage and cache namespaces are isolated per tenant. There is no shared data layer between tenants.

AI pipeline

Incoming visitor questions are matched against Knowledge Base content using pgvector semantic search (1024-dimension embeddings, HNSW indexes). Matched context is injected into the AI prompt with structural delimiters to prevent prompt injection. Responses are sanitised server-side before delivery.

Widget

A single script tag loads the chat interface on your website. The widget communicates with the InnConnect API over HTTPS, validates the requesting domain against your allowlist, and manages visitor sessions automatically. No server-side integration required.

Security

Defence-in-depth across every layer: server-side HTML sanitisation (HTMLPurifier), SSRF protection on all outbound requests, TOTP-based 2FA, per-endpoint rate limiting, CSRF on all forms, and tamper-evident audit logging with 5-year retention.