Compliance, without the sales call
DPA, sub-processor list, DPIA input and your security-questionnaire answers, all ready.
Enterprise · optional
Sluis Edge: the same gates, your own iron.
For organizations with a hard mandate: the data plane as one binary on your own hardware.
sluis.aicloud console · control plane
control tunnel · outbound wss
your VPC / air-gapped
Sluis Edgedata plane
SQLite
prompts never leave your network
The cloud lock is enough for almost everyone.
For almost everyone the cloud lock is enough; Edge is for when the stream, keys and ledger must run on your infrastructure.
Most teams
Stay on the cloud
PII is pseudonymized before egress, residency enforced per request, every passage sealed in the ledger.
- Compliant by default: EU-sovereign hosting, GDPR-ready, ISO 27001 certified
- Live in minutes: swap one base_url, nothing to stand up
- PII leaves as «PERSON_1», «EMAIL_1», restored on return
- Every passage sealed in a tamper-evident ledger
Hard mandate
Choose Edge
The same three gates run on iron you own, and prompts never leave your perimeter.
- An on-prem or air-gapped rule: your network, your rack
- Prompts never transit any third party, Sluis included
- Keys and the audit ledger stay on hardware you control
- Still one console: policy and keys pushed down the tunnel
How Edge works
Control plane in the cloud. Data plane in your rack.
The console manages your fleet from the EU cloud; the gateway runs the data plane on your hardware, over one outbound-only tunnel.
edge.topology · control plane ⇄ data planeoutbound-only
outbound-only TLS · no inbound portPushed down: policy, virtual-key hashes, budgets, provider keysPulled up on demand: usage + audit reads; no prompt data, nothing stored on sluis.aiNever leaves your network: prompts, completions, the audit chain, the ledger
One binary. The same gates. Your iron.
- 01
One binary, no cluster
The whole data plane in one binary, one data directory, state in local SQLite.
- 02
The same three gates
Inspect, pseudonymize, route and seal as in the cloud: +1 ms at the median, measured.
- 03
Air-gapped or on-prem
Leave the tunnel unset: the gateway serves from local config, ready for air-gapped networks.
- 04
Nothing leaves your infrastructure
Prompts, completions, the audit chain, the ledger and your keys stay on your box.
- 05
One console, many gateways
Register and monitor many gateways from one console, live heartbeat, revoke any instantly.
- 06
Keeps serving if the tunnel drops
If the tunnel drops, the gateway keeps serving and enforces budgets from the local ledger.
- 07
Verified install
The install verifies the binary's SHA-256 against the published checksum and refuses on mismatch.
Ready for your security team.
The paperwork is part of the product: whatever your compliance team needs to say yes is already written.
READY
Built for regulated sectors
Banks and insurers, healthcare with HIPAA-regulated or certified workflows, governments with data-residency mandates.
Self-hosted Sluis Edge
When policy isn't enough, the data plane runs on your infrastructure; prompts never transit Sluis.
For agencies and resellers
One console for many client orgs: separated organizations, keys and ledgers per client.
Sluis Edge licence
A flat licence, not a percentage
At serious volume, that's the cheaper route. We'll do the math with you.
Per gateway. Your servers, your keys: prompts never transit Sluis.
Provably compliant in the cloud by default. On your own iron when the mandate demands it.
Start on the cloud; it's the right answer for almost everyone. The day a regulator needs the data plane inside your perimeter, Sluis Edge is one console away.
Not sure which you need?