CCPA, CPRA and GDPR
Customer and employee personal data in prompts to AI models
Personal data is replaced with placeholders before a request reaches an external model
What auditors see NAME_1, PHONE_1 instead of real data
Security sees every AI request
Every request passes through the gateway and is saved to the audit log. Personal data is replaced with placeholders, and confidential documents never leave your network
2,140requests today
1,860masked
280stayed inside
0sent out unmasked
10:42:18HRcandidate applicationmasked
10:42:15Engineeringlog with an API keymasked
10:42:12Analystemail with hidden instructionsblocked
10:42:09Supportcomplaint with customer phonemasked
10:42:06Marketingpress release translationpublic
10:42:03FinanceFY2027 financial modellocal model
10:42:00Legaldemand letter with name and SSNmasked
The same stream goes to your SIEM
Rules for every data class
The more sensitive the data, the closer to you the model that sees it
- Public datapress releases, articles, open-source code
- Personal datanames, SSNs, phone numbers, card numbers
- Internal documentspolicies, email threads, reports
- Trade secretsfinancial models, deals, files marked confidential
Your security team sets the classes and rules in the portal, without going through IT.
A searchable audit log
By employee, key or data type — no ticket to IT
4 events · 4 days
- Sep 12 · 2:02 PM“Export Q3 customers with contact details”214 names masked
- Sep 14 · 6:47 PM“Team salary spreadsheet”confidential — answered locally
- Sep 15 · 9:00 AMOffboarded in directory3 keys revoked
- Sep 15 · 10:41 AMRequest with key vk-…a1b9access denied
What auditors ask for
HIPAA and PCI DSS
Health records and cardholder data
Patient records go only to a local model, and card numbers are masked
What auditors see patient chart → local model
SOC 2 audits
Access control and event logging
A log of every request, export to your SIEM, access revoked through your directory
What auditors see record #52107 → SIEM
We map the requirements to your environment together with your security team — masking rules and policies adapt to local laws and languages.
See the log on your data
We'll set up a pilot, stream events to your SIEM and run your own documents through it — before you decide to buy