Governed model boundary
sanitai logo
AI privacy gateway for industrial teams

AI privacy and PII maskingfor industrial teams that still need speed.

sanitai masks personal data and sensitive business identifiers before model calls, applies governance policy, supports secure retrieval, and restores usable context locally when policy allows it.

PII maskingSecure RAGPolicy enforcementLocal rehydration
4 tiers
dispositions before any model call
0 raw
protected identifiers in external payload
<20ms
local masking and policy budget
sanitai runtime
Live sanitization
scanning
raw input
Initializing scanner…
PII maskingSecure RAGPolicy enforcementLocal rehydrationPII maskingSecure RAGPolicy enforcementLocal rehydrationAudit trailFrench + EnglishIndustrial workflows
Core capabilities

Useful outputs withoutuncontrolled exposure.

sanitai stays practical because governance and product utility are designed together. The system protects identifiers without turning AI adoption into a manual process.

01 /

Policy decisioning

active

Every prompt, document, and provider response is evaluated against an explicit policy model before a model call is allowed. sanitai decides whether content can be sent as-is, masked first, kept local, or blocked entirely.

01 /
Deterministic detection for industrial and business identifiers
02 /
Fail-closed handling for ambiguous or high-risk content
03 /
Auditable outbound checks before every provider call
02 /

Sanitized retrieval

active

Documents are sanitized before ingestion so the retrieval layer never indexes raw protected identifiers. Query linking and local rehydration keep answers usable without widening the trust boundary.

01 /
Placeholder registry created before indexing and retrieval
02 /
Queries can still resolve supplier, part, and lot references
03 /
Responses are validated before local rehydration
03 /

Operator review lab

active

Operators can replay traces, inspect provider behavior, and test policies in a controlled environment without turning internal experiments into a production-facing surface.

01 /
Trace replay for provider behavior and policy review
02 /
Operator-owned workflows for experiments and demonstrations
03 /
Separated from production traffic and enterprise request handling
Interactive boundary demo

Paste your text.Watch the safe version appear live.

Visitors can test SanitAI with their own text, run a real sanitization request, and watch the protected output stream in before copying or reviewing it. The public demo is still being refined and currently supports French and English only.

Checking APIRoute: /v1/sanitizeMode: Free textLanguages: French + English onlyStatus: Demo in development
Your text
Source text
222 chars
Cmd/Ctrl + Enter to run.
Paste
Detect
Stream
Review
Safe output
Sanitized output
Waiting
Ready to transform your text

The protected version appears here, token by token, as soon as you start the sanitization flow.

Detection summary
What SanitAI found
mentions: 0entities: 0risk: pending
No entity inventory yet. Run sanitization to inspect the detected placeholders.

This experience focuses on the transformation itself. The output represents what can cross the trust boundary without exposing raw values.

Operating contexts

Built for teams that cannot treat model calls as ordinary API calls.

Supplier operations, quality teams, engineering reviewers, and governance functions all need the same promise: external models do not see raw protected identifiers unless policy explicitly allows it.

01 /live use case
Supplier operations

Protect account ownership, supplier contacts, and commercial identifiers while still using external models for summaries and triage.

02 /live use case
Quality and CAPA

Review incident narratives, lot references, and escalation records without pushing raw identifiers outside the boundary.

03 /live use case
Manufacturing support

Keep the line between safe operational assistance and blocked process know-how explicit and enforceable.

04 /live use case
Engineering review

Separate content that can be masked and routed from content that must remain local because the secret lives in the method itself.

Private alpha

Bring governed AI intoreal industrial workflows.

We are working with a small set of industrial teams that need AI assistance without letting supplier, quality, or engineering identifiers leak outside their control plane.

Or write directly to [email protected]

01
Direct conversation with the product team
02
Small alpha cohort for industrial workflows
03
Focused on real documents and policy constraints