Security & Compliance
Security, privacy, and compliance for enterprise procurement. Fully self-hosted; data never leaves your network.
Data never leaves your network
- •
Under BYOK, API keys live in gateway memory only — never persisted or transmitted.
- •
Requests route through the gateway straight to vendor APIs; data stays within your private network end to end.
- •
GateLLM itself does not store, train on, or cache request content.
Transport & key security
- •
TLS 1.3 end to end.
- •
Keys in memory only; on restart, injected from your secrets — never on disk.
- •
Client admission control: gate by User-Agent with differentiated policies.
Enterprise compliance
- •
GDPR / CCPA / DPA ready.
- •
SOC 2 Type II, ISO 27001 — meets requirements.
- •
MLPS Level 3, Xinchuang (Kunpeng / Hygon) ready.
- •
SSO/SCIM: SAML, OIDC, Feishu, DingTalk.
Audit & billing correctness
- •
Request-level audit logs, exportable to internal ops and billing systems.
- •
Crash-safe billing: pre-deduct → settle → refund; billing stays correct across process crashes via an in-flight ledger and per-request audit.
- •
Management API to programmatically manage quotas, budgets, usage, and cost.