Inspiration
Compliance audits are slow, expensive, and risky. Cloud LLMs expose confidential data. As brothers solving enterprise bottlenecks, we built a tool to collapse a 3-week gap analysis into minutes, keeping every byte 100% local.
What it does
TrustNode is a 100% offline, AI-driven compliance engine. It evaluates corporate policies against standards (ISO 27001, GDPR) and calculates a definitive metric:
$$\text{Trust Score} = \left( \frac{C + 0.5P}{N} \right) \times 100$$
(Where $C$=Compliant, $P$=Partial, and $N$=Total controls). It outputs a publication-grade LaTeX PDF report with heatmaps, gap analysis, and a multilingual AI executive summary.
How we built it
A zero-network-egress system:
- Frontend: React 19, Vite, and Tailwind v4 (glassmorphic UI).
- Backend: FastAPI.
- Local RAG: PyMuPDF (parsing),
nomic-embed-text& ChromaDB (vector store). - Inference: Ollama running
llama3.1:8bfor strict JSON evaluation. - Export: Python-to-LaTeX bridge for dynamic PDF generation.
Challenges we ran into
Running local RAG on Fedora is resource-heavy. Forcing strict JSON from Llama 3.1 required relentless prompt engineering. Also, integrating the LaTeX compiler right before the deadline meant quickly writing a text sanitizer to escape special characters (like \% and \$) to prevent compilation crashes.
What we learned
Orchestrating local vector DBs with local LLMs, and bridging modern web frameworks with academic typesetting (LaTeX) to produce institutional artifacts.
What's next
SOC 2/HIPAA support, automated Jira ticket creation for non-compliant findings, and chunking optimization for 100+ page documents.
Built With
- chromadb
- fastapi
- latex
- llama-3.1
- ollama
- pymupdf
- python
- react
- tailwindcss
- typescript
- vite

Log in or sign up for Devpost to join the conversation.