Where BRANE sits beside your stack.
Side by side
What you keep, and where it stops.
Six criteria, five solution types.
| Feature | BRANE | DLP | CASB | AI Gateway | Local LLM |
|---|---|---|---|---|---|
| Real-time prompt DLP | Yes | No | No | No | No |
| Reversible masking | Yes | No | No | No | No |
| Multi-model routing | Yes | No | No | No | No |
| On-prem hardware | Yes | Yes | No | No | Yes |
| EU AI Act audit trail | Yes | Yes | Yes | No | No |
| Policy per data class | Yes | Yes | Yes | No | No |
Real-time prompt DLP
- BRANE
- Yes
- DLP
- No
- CASB
- No
- AI Gateway
- No
- Local LLM
- No
Reversible masking
- BRANE
- Yes
- DLP
- No
- CASB
- No
- AI Gateway
- No
- Local LLM
- No
Multi-model routing
- BRANE
- Yes
- DLP
- No
- CASB
- No
- AI Gateway
- No
- Local LLM
- No
On-prem hardware
- BRANE
- Yes
- DLP
- Yes
- CASB
- No
- AI Gateway
- No
- Local LLM
- Yes
EU AI Act audit trail
- BRANE
- Yes
- DLP
- Yes
- CASB
- Yes
- AI Gateway
- No
- Local LLM
- No
Policy per data class
- BRANE
- Yes
- DLP
- Yes
- CASB
- Yes
- AI Gateway
- No
- Local LLM
- No
Comparison based on publicly available vendor documentation. Every row is checked against the respective vendor's own documentation. Retrieved 15 September 2026
Where BRANE belongs
BRANE replaces nothing you already run.
A new control layer is only good news if it leaves the existing one standing. So this page also says what BRANE deliberately does not take on.
Where BRANE sits beside what you have
Data loss prevention
Your DLP inspects files, mailboxes and endpoints and keeps the record there. BRANE inspects the prompt before it leaves the network — a channel no sensor sits on today. The two paths do not overlap.
CASB and SSE
They decide which application someone may open, from which network and on which device. BRANE decides what passes through once it is open. Access and content are two different questions.
Classification and labels
Existing labels stay valid and are read along. But BRANE does not require them: the judgement is made on the prompt itself, even where nothing was ever classified.
Where BRANE does not play
Data at rest
Databases, stores, structured queries. Mature tools exist for that, and BRANE is not one of them.
Model development
Training, red-teaming and evaluation tooling are a field of their own. We build nothing there.
Agent identity
Who an agent is and what it may do belongs to the 2027 roadmap — today it is not part of the product.
Network and email DLP
Long-settled channels with established vendors. There is no reason to touch them.
No existing programme is replaced, no classification is a prerequisite, and nothing is displaced. BRANE takes the one channel nobody was responsible for.