ANVE: the private AI office, on the record. See what that means

ANVE

Private AI, answered · updated 2026-10-07

Can we delete a document from the AI’s memory?
Yes if it was loaded for search; not reliably if it was used to train the model.

Short answer. Yes, if the document was loaded for retrieval, which is the usual way. Deleting means removing the file, its chunks and its embeddings from the index, then dealing with caches, chat copies and backups. If the document was used to fine-tune a model, it cannot be reliably removed: the knowledge is spread through the model’s weights, and the straightforward fix is to retrain without it. Researchers describe making a trained model unlearn data as notoriously difficult. Check every place a copy can sit, because deleting in the interface can leave data in the database, on the disk and in backups.

01

Retrieval versus training

In retrieval, documents stay outside the model. The system searches an index at question time, so deleting the index entries means the model can no longer find them. Chroma’s documentation, for example, says deleting an item removes its embedding, document and metadata, and that items can be deleted by id or by a metadata filter.

In fine-tuning, the model’s weights change. The UK government’s AI Playbook notes that if a model is trained or fine-tuned on private data with different access levels, there is currently no way to preserve those controls. The machine-unlearning literature (Bourtoule and colleagues) calls getting models to unlearn notoriously difficult. So do not fine-tune on documents you may later need to withdraw; use retrieval for those.

02

Five places a document can live

PlaceHow to remove itHow to check
The original file storeDelete or move the originalSearch the file store
The AI’s uploaded copyDelete the file from the knowledge collection or the admin toolLook in the uploads folder or storage list
The index (chunks and vectors)Delete by document id or metadata filter; rebuild the collection if the tool cannotAsk for a distinctive phrase and confirm there is no hit
Chats and files uploaded in chatsDelete those chats and files. Open WebUI keeps chat-uploaded files in separate stores that re-indexing does not touchSearch chat history for the phrase
Backups, exports and logsLet backups expire on a stated schedule; remove from exports; redact logs that hold contentCheck the schedule and log settings
03

Deleted does not always mean gone

Databases often keep deleted data until they tidy up. PostgreSQL’s documentation says deleted rows are not physically removed from their table until a VACUUM is done. The pgvector README shows deleting vectors with an ordinary DELETE statement and has a separate section on vacuuming. SQLite’s secure-delete setting is normally off; to avoid leaving forensic traces, enable it before deleting or run VACUUM afterwards.

Storage adds another layer. NIST SP 800-88 Rev. 2 notes that wear levelling in flash storage makes overwriting unreliable, and describes cryptographic erase, destroying the keys of an encrypted disk, as a fast and high-assurance way to sanitise a whole drive that leaves service.

04

A deletion procedure

  • Identify the document and every collection it is in.
  • Delete it from the index and the uploads store.
  • Delete chat copies if the request requires it.
  • Run the database’s clean-up, such as vacuuming.
  • Record who deleted what, when and in which systems.
  • Note when backups holding the document will expire.
  • Test: ask the AI about a unique phrase from the document.
05

The law, briefly

This is general information, not legal advice. The DPDP Act requires a data fiduciary to erase personal data when consent is withdrawn or when it is reasonable to assume the purpose is no longer served, unless retention is necessary for compliance with a law (section 8(7)). A data principal can ask for erasure (section 12(3)). The Rules add a minimum one-year retention of certain personal data, traffic data and logs for specified purposes (rule 8(3)), which can pull the other way. As of October 2026 those rules are not yet in force.

06

What ANVE says

ANVE answers questions over the office’s own documents, shows the source passage, and offers private GPTs built on the office’s own material. How deletion works in ANVE, in particular whether removing a document also removes its chunks, index entries, cached copies and entries in backups, is not stated here. Ask ANVEAI to demonstrate a deletion during a paid pilot and to confirm the result in writing.

07

Questions people ask

Does the AI remember a document after we delete it?
Not if it was only loaded for retrieval and every copy is gone. Earlier answers, chats and exports may still quote it.
Do we have to delete it from backups too?
Plan for backups to expire on a stated schedule rather than editing old backups. The DPDP Act allows retention where it is necessary for compliance with a law; take advice on your case.
Can the AI be made to forget something it was trained on?
Not reliably. Retraining without the data is the straightforward route. Research methods to make this cheaper exist, but the problem remains hard.
08

What is not real yet

No sealed ANVE unit exists; every image of the appliance on this site is a labelled render. The software runs today on a development machine. No customers yet, no certifications, no delivery date, and the final price is not announced.

Reservations are ₹999 in India or US$12 elsewhere, refundable in full until you confirm an order in writing (terms). Offices that cannot use cloud AI can apply to be one of ten design partners.

09

Sources