paperflow — private document reconciler

paperflow turns a pile of messy, confidential admin documents into a verified structured record, with every field traceable to its source, and reasons across documents without any real identity ever reaching a cloud model. Extraction runs on an AMD Instinct MI300X (Gemma-4-31B-IT via vLLM on ROCm), keeping raw sensitive content on your own hardware. Microsoft Presidio plus custom Singapore recognisers (NRIC, UEN, policy number) redact detected values into a consistent entity map before any cloud call — the same person maps to the same placeholder across every document. Fireworks AI reasons only over the redacted tokens; the reply is re-hydrated on this side of the trust boundary. Air-gapped mode disables the cloud call entirely and asserts route == "local" on the server, making the zero-egress claim true by construction, not by convention. Built for banks, clinics, law firms and any organisation whose confidential document piles legally cannot go to a cloud IDP. Not a compliance product — paperflow claims sharply reduced exposure, not zero leakage, and surfaces every detected entity and every crossed byte so the trust story is auditable in the UI itself. The differentiator is cross-document reconciliation on redacted tokens: conflict detection with rationale, gap flagging against a required-field schema, and a per-exchange privacy receipt that projects directly from the router's log — the client can never fabricate what got sent.