Evaluations across literary, financial, and legal domains demonstrate that RH-RAG consistently improves factual grounding, semantic coherence, and document-level alignment compared to standard and hierarchical RAG baselines, while achieving reliability competitive with proprietary cloud-based systems without compromising data privacy.
Abstract
Generating long-form content from extensive internal reports remains challenging for organizations operating under strict privacy and security constraints, where proprietary cloud-based LLM APIs are often not viable. While locally deployed open-weight models offer a privacy-preserving alternative, existing retrieval-augmented generation (RAG) approaches on smaller models frequently lack effective global planning and accumulate factual inconsistencies over long outputs. To address these limitations, we present RH-RAG, a multi-agent framework for secure and trustworthy long form generation using local language models. RH-RAG decomposes generation into three coordinated stages: a Planner Agent that constructs a global document outline from high-level semantic summaries, a Writer Agent that incrementally generates coherent section-wise content using bounded coherence memory, and a Checker Agent that mitigates hallucinations through natural language inference-based factual verification and an attestation-driven revision loop. The framework further employs a dual-level retrieval index that supports efficient planning and fine-grained contextual generation on consumer-grade hardware. Evaluations across literary, financial, and legal domains demonstrate that RH-RAG consistently improves factual grounding, semantic coherence, and document-level alignment compared to standard and hierarchical RAG baselines, while achieving reliability competitive with proprietary cloud-based systems without compromising data privacy.
This study presents a detailed, actionable approach to constructing secure, privacy-focused RAG systems and culminates in the Integrated Privacy-Preserving RAG Framework (IPRAG), a five-tier architecture supported by a three-phase deployment protocol.
Firoz Mohammed Ozman· International Journal of Fro...· 0 citations
Generative semantic chaffing (GS-Chaff), a training-free multi-agent framework for privacy-preserving LLM inference over natural-language text queries that hides the user’s true intent among semantically plausible chaff queries, is proposed.
Quan Zhou, Zhi-Cheng Wang, Zhengjun Yue et al.· Italian National Conference...· 0 citations
As Retrieval-Augmented Generation (RAG) brings Large Language Models (LLMs) into contact with proprietary and user-specific knowledge bases in sensitive domains, protecting the privacy of both queries and knowledge content becomes a critical requirement. The RAG pipeline, however, exposes sensitive information at two distinct surfaces: (i) during retrieval, embeddings from both queriers and knowledge bases can leak sensitive information, and embedding inversion techniques can reconstruct source text from these representations; and (ii) during generation, exposing raw passages to the LLM jeopardizes proprietary and regulated content. Existing defenses provide partial protection or rely on differential privacy (DP) at the cost of severe utility loss. We propose DP2-RAG, a framework that provides efficient end-to-end DP guarantees for both retrieval and generation while preserving usability. DP2-RAG introduces two mechanisms: Noise-Aware Retrieval with Correction (NARC) enforces chunk-level DP by adding calibrated noise and correcting ranking bias to mitigate accuracy degradation, and Dual Utility-Exponent Mechanism (DUEM) guarantees token-level DP for generated surrogates through a two-layer exponential mechanism while maintaining semantic fidelity. We formally prove $(\epsilon,\delta)$ -DP for both stages and the composed pipeline. Extensive evaluation on six benchmarks shows that DP2-RAG reduces privacy leakage by over 15% relative to strong baselines, retains near-baseline Top- $k$ retrieval accuracy, achieves state-of-the-art semantic consistency among DP-based systems, and incurs minimal latency overhead. These results demonstrate that DP2-RAG makes privacy-preserving RAG practical for sensitive domains.
Yuxuan Cai, Chao-Xiang He, Hong-Sheng Hu et al.· IEEE Transactions on Informa...· 0 citations
This paper introduces the Sensitive Entity Alias Generator (SEAG), a privacy-preserving framework that empowers users to utilize powerful third-party generators without disclosing sensitive information and demonstrates the success of the SEAG framework.
Saleh Almohaimeed, Saad Almohaimeed, Mousa Jari et al.· 0 citations
It is proved that, under an honest-majority assumption and a representation-level separation condition, RAGSentinel exactly recovers a poison-free majority-sized context.
Yueyang Quan, Anjun Gao, Yu Xia et al.· 0 citations
Att2RAG is presented, a double-condition framework for knowledge poisoning attacks on RAG systems that decomposes a successful poisoning event into a retrieval condition and a generation condition, and casts poisoning as maximizing attack success subject to satisfying both conditions.
Zhize Hao· Poster Volume 0008 The 2026...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.