# Theka — DAM with built-in AI

> Theka is a Digital Asset Management (DAM) platform with built-in AI for enterprise document management.

## What is Theka

Theka is a multi-tenant SaaS platform that centralizes company files (contracts, data sheets, images, manuals) into one organized, versioned and protected system. It combines traditional DAM capabilities with AI-powered document analysis and semantic search.

## Core Features

- **Digital Asset Management (DAM)**: Upload, organize and manage documents by category, department, project and entity. Full version control with clear statuses (draft, review, approved, final, archived). Download with audit trail.
- **AI Document Analysis**: Automatic extraction of metadata (dates, names, amounts, phone numbers, organizations), tags, OCR text from scans, and AI-generated image descriptions.
- **AI Chat (RAG)**: Chat interface powered by Retrieval-Augmented Generation that lets users query their documents in natural language. Uses tool-calling to search documents, run structured queries, and read document content.
- **Semantic Search**: Three search modes combined — structured filters, full-text search, and semantic search with vector embeddings.
- **Image Variants**: Multi-size thumbnail generation (small, medium, preview). Custom variant presets per asset type. Download with audit logging.
- **Image Slots**: Named image positions for products and entities (e.g. "Front View", "Side View"). Configurable per asset type and entity type.
- **Entity Management**: Organizations, products, assets and other business entities with custom fields (text, number, currency, date, boolean, select), image slots, and unique external codes for ERP integration.
- **Approval Workflows**: Configurable multi-stage approval processes with role-based permissions. Digital signature support.
- **Protocol Assignment**: Permanent, sequential protocol numbers for regulatory compliance. Atomic and thread-safe.
- **Multi-Tenant Architecture**: Complete data isolation between organizations. Tenant suspension with configurable reasons and scheduled reactivation.
- **Role-Based Access Control**: Three-level permissions — organization roles, category-level access, and per-document controls. Secure sharing links with expiration.
- **Audit Logging**: Every action is tracked — who viewed, modified, downloaded or approved a document, when and from where.
- **ERP Integrations**: Connectors for external business systems. Files are intercepted, indexed and made searchable without duplication.
- **Notification System**: In-app, push and email notifications with per-category preferences and master toggle.
- **Browse Navigation**: Hierarchical browsing by categories, projects, entity types and entities. Assets visible at every level.

## Architecture

- **Frontend**: Next.js 16 (React, App Router) with TypeScript, Tailwind CSS, next-intl for i18n (Italian/English)
- **Backend**: Django REST Framework with PostgreSQL and pgvector
- **AI/ML**: Vector embeddings for semantic search, LLM integration (Anthropic, OpenAI, Google) for document analysis and RAG chat
- **Storage**: S3-compatible object storage with per-tenant isolation
- **Authentication**: JWT with refresh tokens, CSRF protection, optional MFA (TOTP), OAuth (Google, Microsoft)

## Data Privacy & Security

- **Tenant Isolation**: Each organization is a completely separate environment. Data is never shared between tenants.
- **Data Ownership**: Documents remain in the owner's repository with full control. Export or delete everything at any time.
- **AI is Optional**: AI features are opt-in, enabled by the organization administrator. No data is sent to third parties without explicit choice.
- **GDPR Compliant**: Full compliance with EU GDPR, ePrivacy Directive and Italian Privacy Code.
- **Security Headers**: HSTS, CSP, COOP, X-Frame-Options, X-Content-Type-Options, Trusted Types, strict Referrer-Policy.

## Target Users

- **Manufacturing**: Technical data sheets, certifications, supplier contracts — organized and accessible by department with granular permissions.
- **Services**: Complete project files with contracts, attachments and communications. Versioning and collaboration directly on documents.
- **Multi-site organizations**: Centralized system with controlled access per location. Each branch sees only what concerns them.
- **E-commerce**: Product image management with named slots (front, side, detail, ambient), variant generation, and entity-based organization.

## Links

- Website: https://testsoulk.com
- FAQ: https://testsoulk.com/support/faq
- Guides: https://testsoulk.com/support/guides
- Contact: https://testsoulk.com/support/contact
- Privacy Policy: https://testsoulk.com/legal/privacy-policy
- Terms of Service: https://testsoulk.com/legal/terms-of-service
- Full documentation: https://testsoulk.com/llms-full.txt

## Technical Details for AI Agents

- The platform serves content in Italian (default) and English
- Public pages: landing page, support (FAQ, guides, contact, about, release notes), legal (privacy, terms, cookies)
- Authenticated pages require tenant context via subdomain (e.g. acme.example.com)
- API follows REST conventions at /api/v1/
- All dates are ISO 8601, all text is UTF-8
- Sitemap available at https://testsoulk.com/sitemap.xml
- robots.txt available at https://testsoulk.com/robots.txt