What Puccha is
Updated 2026-09-20 · owner Puccha team · overview product rag citations
Puccha (ปุจฉา) is a compliance knowledge worker for Thai enterprises in regulated industries — PDPA, the Bank of Thailand (BOT), the SEC and the OIC. It is a multi-tenant RAG platform running on the Cloudflare edge, built Thai-first rather than translated from English.
Puccha answers questions from your own documents, cites its sources on every answer, and says “I don’t know” when the documents don’t cover the question instead of guessing.
The problem it solves
Section titled “The problem it solves”- Scattered documents — policies live in Google Drive, SharePoint and email, and none of it is searchable together.
- Repeat questions — the same compliance questions every week, answered by the people who can least afford the time.
- No provenance — a general AI assistant will answer, but it cannot tell you which policy the answer came from.
Core capabilities
Section titled “Core capabilities”- Private knowledge base — upload or paste MD, MDX, PDF, DOCX; git-sync; regulation starter packs (PDPA, ISO 27001, BOT FPG 19, SEC, OIC, HA).
- An assistant that answers from your documents — citations validated server-side, and a refusal when nothing supports an answer.
- Thai and English throughout the product.
- Role-based access (RBAC) — Owner / Admin / Editor / Viewer / API-key Guest, plus document-level ACLs.
- Embeddable widget — one script tag on any website.
- Omnichannel — LINE, Facebook, Instagram and more, all landing in one inbox.
- Human handoff with a shared agent inbox.
- REST + streaming API and an MCP server.
- Audit export — access logs, ACL snapshots, DPA references and incident history for auditors.
- Knowledge-gap dashboard — questions asked often but answered poorly are surfaced for your team to fill.
Model-agnostic by design
Section titled “Model-agnostic by design”Puccha sits between your documents and the model. Retrieval, access control, citation checks and refusals are enforced by Puccha — so the model behind it can change without changing a single policy on your side.
Who it is for
Section titled “Who it is for”Insurers (OIC), financial institutions (BOT / SEC), private hospitals (HA + PDPA), and listed companies with DPO obligations.
See Security and compliance for controls, Pricing for plans, and Channels for where Puccha can answer.