Every prompt, response, and tool call passes through CloakPipe. Sensitive data is pseudonymized before it reaches any third-party model, then restored in the response. Deterministic. Reversible. Fully audited. Under 50 ms.
Every other tool replaces sensitive entities with dead tokens like
[PERSON]
— the original information is gone forever. CloakPipe replaces them with
deterministic fake entities the LLM can still reason about,
then restores the real values on the way back.
Format-preserving. Replacement credit cards pass the Luhn checksum. Replacement IBANs pass mod-97. Replacement emails are still emails. The model — and any downstream system that consumes its output — keeps working exactly as before.
The Rust proxy is the foundation — open source under Apache 2.0. The Vault, Policy, and Audit layers are the commercial platform: the part that closes enterprise deals in regulated industries.
CloakPipe speaks the OpenAI API dialect and ships native middleware for the frameworks you're already using. One line of config. Zero rewrites.
CloakPipeRunnable middleware. Drop-in for any chain or agent. Streaming-safe.Same Rust binary. Same detection pipeline. Same vault encryption. Pick the topology that matches your security posture.
The Rust proxy is free forever, Apache 2.0. You pay when you want managed hosting, policy enforcement, RBAC, and compliance evidence — the things that make CloakPipe production-ready for regulated industries.