The Security Layer Between Your Data and AI
A self-hosted governance gateway for Southeast Asian enterprises. RedactNode detects Malaysian PII locally, tokenizes identifiers before dispatch to public LLMs, and records immutable SHA-256 audit trails.
Tanda Guard Chrome MV3 extension intercepts unmasked prompts directly on web chat interfaces.
FastAPI proxy masks Malaysian MyKad, phone numbers, and secrets before external transit.
Safe Zone Next.js portal provides protected document chat, OCR redaction, and audited reveals.
See how RedactNode intercepts sensitive data in real-time
Test a sample enterprise prompt containing Malaysian identifiers or secrets. Toggle between a protected Tanda Gateway transit and an unmanaged direct submission.
Raw PII remains inside your self-hosted perimeter. Third-party providers receive only contextual tokens, allowing safe reasoning without permanent identifier exposure.
Architected for environments where data mishandling has statutory consequences
Enforces strict consent boundaries and cross-border transfer controls before prompt data reaches external providers.
Aligns with Bank Negara Malaysia risk management rules for third-party technology and cloud integrations.
Guarantees patient identification numbers (MyKad) and clinical notes stay strictly inside approved perimeters.
Immutable SHA-256 verification records for internal compliance officer review and direct SIEM webhook export.
Three distinct checkpoints. One verifiable boundary.
RedactNode does not rely on employee policy compliance or manual reminders. It enforces zero-leak privacy across the browser, application gateway, and governance portal.
Tanda Guard
A Chrome Manifest V3 enterprise extension deployed across staff workstations. Intercepts prompt inputs on ChatGPT, Claude, and Gemini before transmission.
- Local DOM inspection prior to network dispatch
- Blocks unmasked paste flows of Malaysian NRIC & Phone numbers
- One-click handoff to masked Safe Zone workspace
Tanda Proxy Gateway
An asynchronous, high-throughput FastAPI gateway running in customer infrastructure. Evaluates prompt payloads before external transit.
- Presidio & spaCy engines with strict Malaysian rule sets
- Bidirectional stream masking with temporary Redis TTL
- ONNX-backed prompt injection & secret scanning
Safe Zone Portal
An authenticated Next.js portal providing sanctioned AI chat, document extraction, manual PDF redaction, and compliance administration.
- In-memory PDF & image OCR with permanent redaction
- Role-based access control (Admin, Employee, Reviewer)
- Hash-chained audit log with CSV export & SIEM webhooks
One policy boundary. Every way your enterprise uses AI.
RedactNode acts as the verifiable gatekeeper between your workforce and external AI providers. Every request answers two non-negotiable questions: can this sensitive data leave the boundary, and is this model approved?
Live Policy Execution Stream
Real-time evaluation events across customer infrastructure
| Timestamp | Application / Target | Detected Entity | Policy Standard | Action |
|---|---|---|---|---|
| 14:32:11 | ChatGPT Web (Tanda Guard) | MyKad NRIC (850315-14-5521) | PDPA Act 709 | TOKENIZE |
| 14:31:05 | Claude 3.7 (API Gateway) | AWS_ACCESS_KEY_ID | Secrets Defense | BLOCK |
| 14:28:40 | Gemini 2.5 (Tanda Guard) | Public General Inquiry | Baseline Policy | ALLOW |
| 14:20:19 | Safe Zone Portal | Clinical PDF (IC 910214...) | MOH Sovereignty | REDACT |
| 14:15:52 | Internal HR Copilot | Maybank Account (514012...) | BNM RMiT | TOKENIZE |
Tanda Guard
Client-side checkpoint for public AI interfaces. Inspects inputs locally, blocks paste events, and hands off to Safe Zone.
Tanda Proxy Gateway
Internal request boundary. Intercepts prompt payloads, tokenizes Malaysian PII, and terminates secret leaks.
Safe Zone Portal
Sanctioned employee workspace with in-memory PDF extraction, permanent manual redaction, and audited reveals.
Audit & Hash Chain
Immutable SHA-256 ledger for policy violations, retention schedules, and exportable regulatory evidence.
An OpenAI-compatible drop-in boundary
Integrate internal microservices, automated agents, or LangChain / LlamaIndex workflows with zero architectural rewrites. Change the base URL to point at your self-hosted Tanda Proxy.
1from fastapi import FastAPI
2from redactnode.gateway import RedactNodeMiddleware
3
4app = FastAPI()
5
6# Mount the RedactNode Malaysian compliance boundary
7app.add_middleware(
8 RedactNodeMiddleware,
9 ruleset="malaysia_strict", # MyKad, Phone, Banking IDs
10 audit_chain=True, # Immutable SHA-256 hash log
11 token_ttl_seconds=3600, # Transient token lifecycle
12 injection_shield="onnx_v2" # Scan prompt injection & secrets
13)
14
15@app.post("/v1/chat/completions")
16async def chat_proxy(request: Request):
17 # Upstream receives sanitized context:
18 # "Customer [PERSON_1] with NRIC [MYKAD_1] requested loan status."
19 response = await dispatch_to_llm(request.sanitized_payload)
20
21 # Internal authorized caller receives unmasked response
22 return response.restore_tokens()Targeted controls for regulated Malaysian operations
Every sector handles different classes of sensitive data. RedactNode applies specific detection rules and retention thresholds to match your operational boundaries.
Hospital Networks & Private Practice
Sanitize Clinical Summaries & Patient Inquiries
Enable physicians and administrative staff to summarize diagnostic notes and patient records without transmitting MyKad numbers, mobile contacts, or health identifiers to public LLMs.
Enforced Safeguards:
- Automatic redaction of Malaysian NRIC (MyKad)
- Temporary token mapping for clinical session context
- No patient data persisted in external provider training logs
Commercial Banks, Takaful & Fintech
Safeguard Customer KYC, Account & Audit Details
Provide compliance and underwriting teams with a controlled AI path that masks Malaysian banking account formats, tax identifiers, and credit references under Bank Negara Malaysia RMiT standards.
Enforced Safeguards:
- Masking of Malaysian bank account formats & tax IDs
- Verifiable hash chains for every outbound prompt
- Direct integration into existing core banking proxies
Government-Linked Companies & Corporate Legal
Protect Tender Submissions & Internal Contracts
Empower legal, procurement, and commercial teams to analyze confidential tender documents and vendor contracts while preserving internal trade secrets and unannounced commercial terms.
Enforced Safeguards:
- In-memory PDF and DOCX permanent redaction
- Role-based permission matrix for document reveal approval
- Audited internal reveal logging with user confirmation reason
Public & Private Universities
Controlled Academic Research & Student Records
Deploy Tanda Guard across university faculties to stop accidental pasting of student identification data and grant researchers a sanctioned portal for working with field datasets.
Enforced Safeguards:
- Browser checkpoint on university workstations
- Sanctioned Safe Zone portal for student research analysis
- Configurable rule sets by department or research group
Single-tenant architecture. Built for your infrastructure.
RedactNode is not a multi-tenant public cloud. Every deployment runs within the customer's designated perimeter so raw identifiers never cross unmanaged boundaries.
Developer & Local Staging
Single-node testing
Deploy RedactNode on a local machine or staging VPC to benchmark gateway latency, masking fidelity, and audit format.
Included Capabilities:
- Docker Compose stack with automated Caddy TLS
- FastAPI Tanda Proxy with OpenAI-compatible API
- Malaysian PII detection (MyKad, Phone, Banking)
- Local Safe Zone portal for document review
- In-memory Redis mapping store
Enterprise PoV Pilot
Private VPC / Cloud
A structured, 30-day proof-of-value deployment for compliance, legal, or IT governance teams in Malaysian organizations.
Included Capabilities:
- Dedicated single-tenant deployment in customer VPC
- Tanda Guard extension rollout for pilot users
- Custom Malaysian compliance rules (PDPA 2026 / BNM)
- Hash-chained audit log with CSV and SIEM export
- Assisted deployment and security architectural review
High-Assurance Cluster
Dedicated Infrastructure
For GLCs, banks, and healthcare networks requiring air-gapped operations, custom retention, and regulatory sign-off.
Included Capabilities:
- Air-gapped and isolated network deployment options
- PostgreSQL audit persistence with retention policies
- Permanent OCR document sanitization (PDF & DOCX)
- Role-based access control with audit reveal approval
- Custom SLA, compliance attestations, and dedicated engineer support
Governance briefs & engineering specs
Technical analysis of Southeast Asian AI privacy, statutory compliance, and gateway engineering.
Preparing for Malaysia's 2026 PDPA Amendments
A comprehensive guide for Data Protection Officers navigating cross-border transfer rules and AI prompt governance under Act 709.
The Hidden Risks of Web-UI AI Chat
Why unmanaged employee usage on public LLM interfaces constitutes an uncontrolled egress channel for customer identifiers and confidential memos.
How Tanda Guard Intercepts DOM Events
A technical architectural review of Chrome Manifest V3 interception, client-side regex detection, and zero-prompt transit handoffs.
Deploy an evaluation node on your own infrastructure
Validate gateway latency, test Malaysian PII detection rules with sample enterprise workloads, and review the hash-chained audit format inside your security boundary.