Hide what’s private
Names, IDs, cards become tokens before they leave. Restored when the answer returns. The model never learns who it helped.
AI never sees your secrets.
Personal data is stripped to tokens inside your building — then restored on the way back. Every request written down.
Wire · live sample
REQ_8C2F3A91 · 43 ms
t+0.0
recv
Клиент Алиева Н.Ш. · ПИНФЛ 30303856700019 · Uzcard 8600…
t+12ms
scrub
{{tok_nm_7f3a}}
{{tok_id_c91e}}
{{tok_pay_2b08}}
t+28ms
score
attack 0.06 · policy workspace-strict · allow
t+43ms
sent
✓ outbound clean · originals restored on return · logged
Our partners
Without a gate, customer data simply leaves.
Support, sales, finance already paste records into public AI. There is no ticket. There is no trail. There is no way back.
01
Employee needs a faster reply.
02
Pastes a real customer file into public AI.
03
Name, ПИНФЛ, card cross the perimeter.
04
Lives in a vendor log. No ticket. No trail.
What you can show the auditor later: nothing on record.
Without a gateway
Hi, customer Алиева Н.Ш.
ПИНФЛ 30303856700019
Card 8600 4954…
→ leaves as-is to api.openai.com
Leaked · no log
With SecurePrompt
Hi, customer {{tok_nm_7f3a}}
ПИНФЛ {{tok_id_c91e}}
Card {{tok_pay_2b08}}
→ model never sees the real values
Tokenized · on record
One gate. Three verdicts.
SecurePrompt runs on your premises. Every AI request hits it first. Keys stay yours.
Log what’s unclear
Ambiguous cases proceed — with who, what, and when written down. No false stop. No blind spot.
Stop what shouldn’t pass
Prompt injection and policy hits end here. Fail-closed: if we can’t decide safely, nothing gets out.
A diff. Not a project.
Point apps at the gateway instead of the public API. Observe-only in a day.
− api.openai.com
+ gateway.your-company.internal
40+Local data types
<50msAdded latency
0Telemetry to us
1 dayTo observe-only
Every interaction is logged.
One file per request — who, what was hidden, the verdict, the time. Kept inside your building.
On your premises
Keys never leave. We receive no traffic telemetry.
Built for this data
Local identifiers and mixed scripts from day one.
Exportable when asked
Per-request logs without reconstructing the past from memory.
Audit printoutREQ_8C2F3A91
- Who
- n.alieva · macbook-pro
- Hidden
- tok_nm_7f3a · tok_id_c91e · tok_pay_2b08
- Attack
- 0.06 · allow
- Policy
- workspace-strict
- Final
- sent ✓ · restored
- Time
- 43 ms · logged
Nothing left the building
Day 14: you know what would have leaked.
Two weeks. Observe only. Nothing blocked. Then a report written from your own traffic.
Sample leak report · day 14
695
pieces of personal data that would have left the building.
Support412
Sales187
Finance96
Injections7
A sample pilot. Yours will differ — that’s the point.
Request the pilot
Observe-only. We reply within one business day.
Received
Filed. We’ll be in touch within one business day.