
Zero-Knowledge AI Inference. Raw Data Stays Home.
Tanda Gateway sits between your internal applications and external AI providers. It intercepts outgoing prompts, replaces sensitive Malaysian identifiers with reversible surrogate tokens, and restores responses before returning to your callers.
Drop-in replacement for any OpenAI-compatible SDK
No complex SDK refactoring. Point your application's base URL to Tanda Gateway. Existing code, prompts, tool calls, and structured outputs function without modification.
from openai import OpenAI
# 1. Point the client to your internal Tanda Gateway boundary
client = OpenAI(
base_url="https://gateway.internal.firm/v1",
api_key=os.environ["REDACTNODE_GATEWAY_KEY"]
)
# 2. Existing prompts with Malaysian identifiers execute unmodified
# Tanda Gateway automatically strips PII before forwarding to OpenAI
response = client.chat.completions.create(
model="gpt-4o",
messages=[
{"role": "user", "content": "Review loan for MyKad 901024-14-5821"}
],
stream=True # Streaming tokens re-hydrated dynamically in real time
)
for chunk in response:
print(chunk.choices[0].delta.content or "", end="")The control plane for responsible enterprise AI
Tanda Gateway is not a passive firewall. It is a stateful, high-throughput protocol engine built for high-volume operational workloads.
Streaming SSE Re-Hydration
< 2ms chunk latency
Intercepts Server-Sent Events (SSE) token by token. Re-hydrates surrogate tokens back into original values on the fly without waiting for the full response to finish generating.
Ephemeral In-Memory Vault
AES-256-GCM encryption
Token pairs reside in an isolated Redis cluster with configurable time-to-live (TTL). When a chat session closes, the cryptographic keys are shredded from RAM.
Sovereign Model Routing
Multi-provider policy
Enforces custom data classification boundaries. Directs restricted banking or healthcare prompts to on-premise local models, while routing general tasks to cloud APIs.
Zero-Honeypot Audit Stream
SHA-256 cryptographic logs
Emits structured compliance telemetry recording timestamps, rule IDs, and hash digests without creating a vulnerable central database of employee prompts.
Choose the boundary your organization can operate
Start with a managed cloud pilot, then migrate to dedicated VPC infrastructure or fully air-gapped hardware when data residency mandates require it.
Hosted Sovereign Gateway
FAST PILOTManaged multi-tenant or dedicated gateway instances operated by RedactNode. Ready in minutes for teams validating the prompt sanitization workflow.
Private Cloud VPC Cluster
RECOMMENDEDDeploy RedactNode Gateway containers inside your own AWS, Azure, or Google Cloud VPC. Token vaults and encryption keys remain exclusively in your network boundary.
Air-Gapped Hardware Enclave
BNM RMiT ALIGNEDSelf-contained physical server installation for regulated financial institutions and defense environments requiring strict physical data isolation.
Bring Tanda Gateway into your security perimeter
Pull container images from our private registry, evaluate latency metrics against production workloads, and maintain sovereign control of your sensitive enterprise prompts.
