Module 01

The Big Picture

What DeView builds, how our architecture is structured, and why production-grade AI is different from a demo.

The DeView Enterprise AI Architecture

Every DeView engagement operates within a five-layer model. Understanding these layers lets you explain exactly where our work sits inside a client's existing technology estate.

LAYER 5 — BUSINESS Business Processes · Strategic Goals · KPI Dashboards · Executive Reporting · ROI Tracking LAYER 4 — APPLICATION User Interfaces · ERP (SAP / Oracle) · CRM (Salesforce / HubSpot) · Slack · Document Platforms LAYER 3 — DATA FOUNDATION Data Sources · ETL Pipelines · Data Integration · Vector Stores · Feature Engineering · Data Quality LAYER 2 — INFRASTRUCTURE Security & Access Control · Cloud / On-Premises · MLOps · Audit Logging · Monitoring & Alerting LAYER 1 — AI / ML CORE LLMs · ML Classifiers · Model Registry · Serving Infrastructure · Evaluation Framework · Embeddings

Fig 1.1 — DeView's five-layer enterprise AI architecture. Every engagement touches all five layers.

The Four AI Operating Modes

📈 Predictive Data-driven

Uses historical and real-time data to forecast outcomes. Examples: inventory demand forecasting, fraud detection scoring, credit risk assessment, workforce capacity planning.

ML modelstime-seriesscoring APIs
💬 Conversational User-facing

AI-powered interfaces that respond to natural language. Examples: internal knowledge assistants, customer support bots, HR policy Q&A, procurement request handling.

LLMsRAGchat APIs
✍️ Generative Content

AI that creates new documents at scale. Examples: automated report generation, loan application summaries, contract drafting, compliance document review.

LLMstemplatesstructured output
🔬 Analytical Insight

AI that surfaces hidden patterns. Examples: customer churn signals, pipeline health scoring, document classification, sentiment analysis on support tickets.

NLPclassificationembeddings

Production-Grade vs. Proof-of-Concept

Sales tip: Most prospects have already seen an AI demo. The real question they're asking is: "Can this actually work inside our environment, with our data, under our security policies?"
DimensionProof-of-ConceptDeView Production-Grade
DataSample CSV or synthetic dataLive integrations with real CRM / ERP
SecurityNo auth, shared API keysRole-based access, audit logs, isolated tenants
ReliabilityDemo environment, no SLAUptime monitoring, error handling, fallback logic
MonitoringNoneDrift detection, evaluation pipelines, alerting
IntegrationStandalone, copy-paste workflowEmbedded in existing tools and workflows
ComplianceNot consideredDesigned for regulated industries from day one
OwnershipVendor lock-in, hosted platformDeployed in your environment — you own the system
Module 02

Services Deep Dive

A technical breakdown of each DeView service — how it works, what it connects to, and what the client receives.

AI Workflow Audit

What it is

A structured analysis of one business process to identify the highest-value AI automation entry point. Delivered as a scoped report with a concrete, costed implementation pathway.

What the client receives
  • Process map annotated with bottleneck markers
  • Automation score per process step (effort vs. impact)
  • Top use case with rough ROI estimate
  • Implementation roadmap phased into 3 stages
📋 Process intake interview🔍 Bottleneck mapping📊 Automation scoring🎯 Use case prioritization📄 Roadmap delivery

Internal Knowledge Assistant

Key concept — RAG: Instead of guessing answers, the AI searches your company's actual documents, retrieves the most relevant sections, then answers — grounded only in those specific documents, with citations.
How RAG works (for clients)

Think of it as giving the AI a private search engine over your company's documents. When someone asks a question, the AI searches first, finds the right policy or procedure, then answers — quoting the source. It never makes up an answer that isn't in your documents.

What gets connected
  • Confluence / Notion — internal wikis and runbooks
  • SharePoint / Google Drive — file storage and policies
  • PDF / Word documents — procedures and compliance docs
  • Slack history — surfacing institutional knowledge
📁 Company docs ingested✂️ Chunked & vectorized🗄️ Stored in vector DB❓ User asks question🔍 Relevant chunks retrieved💬 LLM answers with citations

Document Automation

What it automates

Repetitive document processing: extracting structured data from forms, classifying incoming document types, generating outputs from unstructured text, routing documents to the correct downstream workflow.

Human-in-the-loop (a feature, not a limitation)

When AI confidence falls below the configured threshold, the document is flagged for human review rather than processed automatically. The system never silently makes a high-stakes mistake.

📄 Document received🔤 OCR / text extraction🤖 LLM parsing & classification✅ Confidence check🔀 Auto-process or human review⚙️ Downstream system updated

Customer Support Assistant

How intelligent routing works

The AI classifies each message by intent and confidence score. High-confidence intents are handled automatically; ambiguous ones escalate to a human agent with full conversation context pre-populated.

CRM integration behaviour
  • Reads full customer history before composing a reply
  • Logs every AI interaction to the CRM record
  • Creates tickets or updates case records automatically
  • Escalates with conversation context pre-loaded
📨 Customer message🎯 Intent classification📚 KB + CRM lookup💬 AI response generated📝 CRM record updated

Reporting & Research Copilot

What it replaces

Hours of manual data gathering, spreadsheet consolidation, and report drafting. The AI connects directly to data sources, queries them on schedule, summarizes findings in your preferred format, and delivers the report automatically.

Data connectors
  • SQL databases — direct query via read-only credentials
  • BI tools — Tableau, Power BI, Looker exports
  • APIs — internal and third-party data feeds
  • Spreadsheets — Google Sheets, Excel via scheduled sync
🔗 Data source connected⏰ Scheduled data pull🤖 LLM summarizes & formats📊 Report structured📧 Delivered to stakeholders

AI Implementation Advisory

What makes this different

Recommendations scoped to the client's actual tech stack, team capabilities, and data readiness. Output is a prioritised roadmap with effort/impact scoring — not a slide deck full of buzzwords.

Assessment dimensions
  • Data readiness — quality, availability, governance
  • Integration feasibility — existing systems audit
  • Team capability — skill gaps and training needs
  • ROI modelling — time and cost savings per use case
Module 03

Data Infrastructure

How client data flows from existing source systems through DeView's AI pipelines — and back into the business.

Data Integration Map

CLIENT SYSTEMS ETL PIPELINE AI LAYER OUTPUTS CRM (Salesforce) ERP (SAP / Oracle) Document Storage SQL Databases Slack / Email BI Tools Extract ↓ Transform ↓ Validate ↓ Load LLM / ML Models Vector DB · Model Serving Evaluation Layer Scoring · Drift Detection Audit Logger Every action recorded Insights & Reports Automated ActionsCRM updates, tickets Compliance LogsExportable audit trail

Fig 3.1 — Data flow from client source systems through the ETL pipeline into the AI layer and back to business outputs.

Deployment Models

Cloud-hosted

Deployed within the client's own AWS, GCP, or Azure account. Data never leaves their cloud environment. DeView manages the deployment — not the data.

On-premises

Fully air-gapped within the client's physical or virtual infrastructure. Uses open-source models (Llama 3, Mistral) running locally. Required for highly regulated environments.

Hybrid

Sensitive regulated data stays on-premises; non-sensitive processing uses cloud inference. Common in lending where some datasets are regulated and others aren't.

Data Isolation & Ownership

Key assurance for enterprise procurement: Each client deployment is fully isolated. No shared model learns from one client's data and applies it to another. Your data is never used to train general-purpose models.
  • Separate database schema or dedicated instance per client
  • API keys and credentials scoped exclusively to each deployment
  • Audit logs are client-specific and fully exportable on request
  • Data retention policies configurable per engagement agreement
  • Client retains full ownership — system lives in their environment
Module 04

Security & Compliance

How DeView handles data security, access control, audit trails, and regulated industry requirements.

Security Boundary Map

CLIENT BROWSER React UI (Next.js) Public keys only (safe) localStorage (UI state) No sensitive keys exposed 🔒 HTTPS only SERVER (Node.js API) Input validation + sanitize Honeypot spam detection Secret env vars onlyNever exposed to browser API route auth guards Zero trust between zones THIRD-PARTY SERVICES Supabase (PostgreSQL) LLM / AI APIs Email / Notifications Server-proxied — never direct

Fig 4.1 — Security boundaries. Sensitive credentials exist only server-side. The client never touches secrets directly.

Security Measures

🔑 Access Control
  • Role-based permissions — users see only what they need
  • Service accounts — systems talk with scoped keys only
  • Row-level security enforced at database layer
  • Admin access server-side only, never client-side
📋 Audit & Traceability
  • Every AI action logged — who, when, what input, what output
  • Immutable records — logs cannot be retroactively altered
  • Export available — full audit trail for compliance review
  • Timestamps — created_at / updated_at on all records
🛡️ Input Security
  • Server-side validation — all input sanitised before processing
  • Length limits — prevent injection and overflow attempts
  • Honeypot fields — bot and spam detection on all endpoints
  • Domain validation — rejects personal emails for B2B flows
🤖 AI-Specific Security
  • Prompt injection mitigation — input sanitised before LLM
  • Output filtering — AI responses screened before delivery
  • Domain guardrails — model constrained to defined scope
  • Confidence thresholds — low-confidence outputs escalate to humans

Regulatory Compliance Context

Sales guidance: DeView does not currently hold SOC 2 or ISO 27001 certifications. When a prospect asks, pivot to architecture.
RegulationWho it applies toHow DeView addresses it
GDPREU-based clients or clients handling EU personal dataData stays in client-controlled cloud; data processing agreements available
PDPOHong Kong personal data processingPrimary jurisdiction; data residency options built into HK deployments
MAS TRMSingapore financial institutionsAudit trail requirements met; model risk documentation available
HKMAHK banks and licensed lendersOn-premises deployment for regulated data; full audit exports
SOC 2US enterprise and SaaS buyersArchitecture follows SOC 2 principles; formal certification on roadmap
Module 05

MLOps & Monitoring

How DeView ensures AI systems keep working correctly after they go live.

The MLOps Lifecycle

🚀 Deploy Model goes to production 👁 Monitor Performance tracked 📊 Evaluate Accuracy & drift scored 🔄 Retrain Model improved Continuous improvement loop

Fig 5.1 — MLOps lifecycle: Deploy → Monitor → Evaluate → Retrain → back to Deploy.

👁 Monitor — What is tracked
  • Response latency — is the AI responding within SLA?
  • Error rates — are requests failing or timing out?
  • Input distribution — are query types shifting?
  • Output consistency — are answers staying on-topic?
📊 Evaluate — What is scored
  • Accuracy — are answers factually correct?
  • Relevance — are answers appropriate for each query?
  • Drift score — how far has performance shifted from baseline?
  • Human feedback — thumbs up/down signals from end users

Model Drift — Explained Simply

What is drift? An AI model trained on last year's data may become less accurate as the world changes. Drift monitoring catches this before it causes problems.
Data drift

Incoming data starts looking different from the training data. Detected by comparing statistical distributions of inputs over time.

Concept drift

The relationship between input and correct output changes. Detected by declining accuracy scores on sampled outputs.

Human-in-the-Loop Escalation

AI generates outputConfidence scoredHigh confidence → auto-deliverLow confidence → human reviewHuman approves / correctsCorrection logged for retraining
Why this matters in sales: Human-in-the-loop is a professional risk management feature. Frame it as governance, not a limitation.
Module 06

DeView's Own Technical Stack

The infrastructure DeView runs on — demonstrating we operate with the same engineering standards we build for clients.

LayerTechnologyVersionPurpose
FrontendNext.js + React16.2 / 19.2Server-side rendering, App Router, API routes
LanguageTypeScript5.x strictType-safe development — catches errors at compile time
StylingTailwind CSS4.xUtility-first design system
AnimationFramer Motion11.xScroll-triggered reveals, reduced-motion support
DatabaseSupabase (PostgreSQL)LatestClient portal data, lead capture, project milestones
EmailResend + Web3FormsMulti-tier fallback delivery chain
HostingNetlifyServerless deployment, global CDN, automatic deploys
RuntimeNode.js20 LTSServer-side API route execution
i18nCustom context systemEnglish + Traditional Chinese (zh-HK)

Client Portal Architecture

Client receives reference codeEnters code on portal pageAPI call to /api/client-portalServer queries SupabasePortal + milestones returnedTimeline rendered with Framer Motion
What clients see in their portal
  • Project title and client name from Supabase
  • Current stage indicator — which phase the engagement is in
  • Milestone timeline — done / active / upcoming with animations
  • Progress bar — currentStage / total milestones
Security design
  • Reference code acts as access token — no password required
  • Server-side queries only — Supabase key never in browser
  • is_active flag — any portal disabled instantly
  • Fallback resilience — Task Manager API if Supabase unavailable
Credibility point: When a prospect asks "have you built production systems like this before?" — walk them through DeView's own infrastructure.
Module 07

Sales FAQ

The 15 most common technical questions from enterprise prospects — with answers your sales team can use immediately.

Where is our data stored?
Can this connect to our existing CRM or ERP?
What LLM do you use — is it OpenAI / ChatGPT?
Who has access to our data?
What happens if the AI gives a wrong answer?
Is this GDPR / PDPO compliant?
Can we run this on-premises?
What is the typical integration timeline?
How do we know it's working correctly after go-live?
What's the difference between this and ChatGPT?
Does your AI learn from our data and share it?
Do you have SOC 2 or ISO 27001?
What if we stop working with DeView?
Can the AI handle industry-specific terminology?
What support after launch?