Short answer
A company without an ML team can have LLM document and ticket processing built inside its own infrastructure if it brings three things: a person who owns the process and decides what each field means, a set of real documents with the correct answers, and an owner for the system after launch. The engineering side decides where the model runs, builds the pipeline around it, measures accuracy per field on your documents, and hands over code, schemas and the evaluation set. The model is a small part of the work; review, validation and the audit record are most of it.
The pipeline has the same parts whether it reads claims, support tickets, invoices or KYC files. How each stage works, from intake to the audit record, is explained in an LLM pipeline for claims, tickets and KYC files inside your own infrastructure. What an engagement delivers is those stages as your system.
| Deliverable | What it is |
|---|---|
| Intake and classification | Routing of each document or ticket to a type, with unknown types sent to a person |
| Text and layout extraction | OCR or a layout model, run inside your network |
| Model serving or model access | A self-hosted model, or a contracted cloud endpoint, behind one internal interface |
| Output schemas | One versioned schema per document type, with explicit "not found" values |
| Validation rules | Your existing business checks written as code |
| Review queue | A screen where people confirm or correct the fields that need it |
| Evaluation set | Real documents with correct values, used to score every release |
| Audit record | Per field: source, model and prompt version, rule results and reviewer |
| Runbooks and dashboards | How to operate, monitor, roll back and upgrade the system |
"The data must stay inside" can be met in three ways, and each vendor states its data terms differently.
OpenAI states that "data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us)", that "abuse monitoring logs are generated for all API feature usage and retained for up to 30 days, unless longer retention is required by law", and that exclusion from those logs under Zero Data Retention is available to eligible customers and "subject to prior approval by OpenAI"[1].
Microsoft states that Azure Document Intelligence "temporarily stores data and results in Azure Storage in the same region as the request" and that the data "is then deleted 24 hours from the time that you submit an analyze request", with an API call to delete it sooner; its connected containers "don't send customer data, such as the image or text that's being analyzed, to Microsoft"[2]. Azure's pricing page adds: "Container pricing is the same as cloud service pricing"[3].
AWS's Textract FAQ states that "Amazon Textract may store and use document and image inputs processed by the service solely to provide and maintain the service and to improve and develop the quality of Amazon Textract and other Amazon machine-learning/artificial-intelligence technologies", with an opt-out through an AWS Organizations opt-out policy[4]. Google states: "At Google Cloud, we never use customer data to train our Document AI models"[5].
vLLM, "a fast and easy-to-use library for LLM inference and serving" under Apache-2.0, serves open-weight models on your own hardware behind an "OpenAI-compatible API server", so no model provider receives the documents[6][7].
| Option | Where documents go | What you manage |
|---|---|---|
| Model provider's API under contract | The provider's infrastructure, under its retention terms[1] | Contracts, approvals for retention controls, the provider's retirement schedule |
| Cloud document or model service | Your cloud provider's region, under its data terms[2][4][5] | Region and opt-out settings, quotas, private networking |
| Open-weight model on your servers | Nowhere outside your network[6][7] | Hardware, patching, security of the serving layer, upgrades, on-call |
The trade-offs of the three, with the compliance evidence each one produces, are in choosing an LLM deployment for a closed perimeter; the two serving stacks are compared on vLLM vs Ollama, and the API-or-self-host arithmetic on OpenAI API vs a self-hosted LLM. The choice can also be made per document class: public or low-risk documents can use a cloud endpoint, restricted ones stay on a self-hosted model.
None of these requires machine-learning staff. They require the people who already run the process.
| Stage | Output | Gate |
|---|---|---|
| 1. Inventory | Document types, volumes, channels, data classes, target systems | Scope and perimeter agreed with security |
| 2. Baseline | Today's handling time and error rate per document type | A number to beat, measured, not assumed |
| 3. First document type | Schema, rules, extraction and evaluation set for one type | Per-field accuracy on the frozen set meets the agreed mark |
| 4. Integration | Review queue, audit record, connection to the target system | End-to-end run on test data, including failures |
| 5. Shadow run | The system processes live documents; people still do the work | Agreement between system and people measured per field |
| 6. Production | Automated fields go live; the rest stay in review | Error rate in the sampled automated fields within target |
| 7. Next types and handover | More document types; runbooks, dashboards, training | Your owner operates a release without help |
Starting with one document type is deliberate. It produces a measured result early, rather than a platform that is judged only at the end, and it tests the review queue and audit record on real traffic before the scope grows.
About amBrain
Yes, if you provide a process owner, real documents with correct answers, reviewers and an owner after launch. The engineering team brings the model deployment, the pipeline, the evaluation and the handover; machine-learning staff on your side are not required.
Yes. An open-weight model served inside your network, for example with vLLM behind its OpenAI-compatible server[6], means no model provider receives the documents. OCR, the review tool, logs and the evaluation set must stay inside too, since each holds document content.
By measuring it per field and per document type on a frozen set of your own documents with known answers, and by sampling automated fields in production. One global accuracy figure hides the fields that fail.
For standard documents at modest volume, often yes. Building fits when documents may not leave your network, when your rules are specific, or when subscription and volume terms, such as ABBYY's automatic twelve-month renewals and overage charges[8], become the larger cost. Compare both on the same documents.
Either your own team, trained during handover with runbooks and dashboards, or a vendor under a support agreement, or both. Decide before the build starts, because it changes what is documented and automated.
Product and company names are trademarks of their respective owners and are used only to identify their products and published terms. No vendor named here reviewed or endorsed this page.
Related