Security that pays for itself

One gateway inside your network for every AI request — masking follows local laws and languages

Legal

“Contract with Maria LopezNAME_1, SSN 123-45-6789SSN_1”

→ Claudepersonal data masked

Diagram: a perimeter wall separates your company from external models. Requests from Legal, Marketing, Finance, Engineering and AI agents pass through a single opening — the Kordon gateway. Personal data and keys are replaced with placeholders, restricted data goes to a local model inside, and requests over the limit are stopped.

Every AI model in one place

Who uses which models, on what terms and what it costs

More for IT
Kordonadmin portal / Keys and access

Who uses AI

Everyone gets their own key and rules. Sign-in goes through your company SSO.

1,480AI users
  • ARAnna RossLegal · key …3f2aSSO sign-in
  • OSOlivia SmithProcurement · key …8d21SSO sign-in
  • CICI pipelineEngineering · key …91c0service
  • DDelta LogisticsContractor · key …c4d8SSO sign-in

Delta Logistics key revoked — access to every model cut off at once

Personal data stays inside

Kordon checks every request before it leaves your company

How protection works
  1. Request
  2. Scan
  3. Masking
  4. Routing
  5. Answer
DraftademandlettertoJohn CarterNAME_1name,SSN123-45-6789SSN_1SSN,$48,000overdue
HereisthedemandlettertoNAME_1John Carter(SSNSSN_1123-45-6789):pay$48,000byNovember1.

An employee writes as usual — in their chat or through the API. The request goes through Kordon.

Local laws, local languages

Kordon masks data the way each country writes it — in its languages, with its ID formats, under its privacy law

Markets

Another market? Its languages and law profile are set up during rollout.

Request in Spanishwritten

ResumelavisitadeMaría López,MRN 448-21-907,SSN 123-45-6789

Privacy law
CCPA, HIPAA
Languages
English, Spanish
ID formats
SSN, ITIN, MRN, driver’s license
Routing
Approved US models or local

Filters tuned for English miss a Spanish visit note or a German IBAN. Kordon checks each request in the language it was written in.

Runs inside your network

And lowers your model bill from day one

Your networkOutsideplaceholders onlyEmployees and serviceschats, apps, agentsOkta, Entra IDSSO sign-inKordon gatewayrules, routing, usage trackingPortalsemployee, adminPostgreSQL, Redisaudit log, cacheSIEM, monitoringevents, OTLPLocal modelsfor restricted dataCloud providersOpenAI, AnthropicOther providersGoogle, MistralOnly what your rulesallow ever leaves
  • Your servers or your cloud

    Docker Compose on a single server or Helm on Kubernetes — in your data center or cloud.

  • No changes to app code

    The API is OpenAI-compatible: apps and agents change only the endpoint and key.

  • A smaller model bill

    Simple tasks go to cheaper models, repeat questions come from cache, budgets cap spend.

    See what it costs

Three ways to pay for AI

Kordon works with all three: it shows who spends what and on what, and trims waste wherever it can

Run your own numbers
  • Provider APIs

    pay per request

    With Kordon: Simple requests go to cheaper models, complex ones to stronger ones

  • Per-seat subscriptions

    fixed fee per employee

    With Kordon: You see who isn’t using their seat, so you can drop the extra ones

  • Shared pool

    a few accounts for everyone

    With Kordon: If an account gets banned, requests fail over to the API — work doesn’t stop

you pay Kordon cutsbar length — monthly bill

Start with a pilot

Send a short request — an engineer will get in touch to talk through your use cases and plan the pilot

Request a pilot