Compliance & Audit: Self-Hosted, Redaction, Logging, Retention
Request and response logging, two-layer sensitive-data redaction, login and permission audit, retention and deletion — data never leaves your network; pass SOC2 / GDPR / MLPS audits.
What the community actually complains about
Zhihu and Reddit: "finance / healthcare / government data can't leave the country," "calling an LLM requires an algorithm filing," "how do I redact PII," "how do I keep audit logs." A SaaS gateway routes requests through its own servers, so compliance audits are hard; relays add data-exfiltration and resale risk.
How GateLLM does it
GateLLM deploys fully inside your network — data never leaves, satisfying data-export compliance. Request and response logs are exportable for audit; two-layer sensitive-data redaction (request side + response side); login and permission audit (SSO / SCIM); retention and deletion are configurable. BYOK keys live in memory, never on disk. SOC 2 Type II / ISO 27001 / GDPR / MLPS Level 3 / Xinchuang ready.
5 levers that actually land
- Request and response logging, exportable to audit systems
- Two-layer sensitive-data redaction (request side + response side)
- Login and permission audit (SSO/SCIM: SAML / OIDC / Feishu / DingTalk)
- Configurable retention and deletion policy
- Fully self-hosted: data never leaves the network, keys in memory only