Real-time detection.
Real-time detection.
Layered detection identifies 23 PII categories — from IBANs to Art. 9 GDPR health data — in under 200 ms, before the prompt ever leaves your network.
PRIVACY & MASKING
Detect. Mask. Audit.
PII, PHI, IP, contracts, source code — Brane recognises 8 data classes in real time and masks them reversibly in your on-prem vault.
PIIPHIIPContracts
The leaks
Five places your data leaks into AI today.
Every prompt is a potential breach. These are the patterns we see across every audit.
A
PII in employee prompts.
Names, addresses, IDs pasted into ChatGPT — often without realising. Cloud training risk, GDPR risk.
B
Trade secrets in 'draft this for me'.
Roadmaps, pricing models, M&A drafts — sent to public LLMs as helpful context. No mask, no log.
C
Patient IDs to external APIs.
Clinical workflows that touch OpenAI or Anthropic without on-prem masking. PHI exposure, audit nightmare.
D
Source code uploads.
Developers debug with Copilot or Claude — proprietary IP leaves the building. No vault, no provenance.
E
Contract clauses to summarisers.
Legal teams paste NDAs and MSAs into AI summarisers. Terms become training data for foreign models.
The principle
Mask beforeit leaks.
Sensitive entities are pseudonymised before cloud egress. The AI sees context, never cleartext. Reversible via on-prem vault.
How Brane protects
Five guardrails for every prompt.
Real-time detection, reversible masking, context preservation, local vault, policy per data class. Hover or scroll.
Reversible pseudonymisation.
Reversible pseudonymisation.
Sensitive entities are replaced with stable tokens. The cloud LLM works on context; Brane resolves tokens back to cleartext on the response path.
Context preservation.
Context preservation.
Brane keeps the prompt usable. Person, address, account — masked but coherent, so the AI can still reason about relationships.
Local vault.
Local vault.
Token-to-cleartext mapping lives on Brane hardware, never in the cloud. Vault is hardware-encrypted, EU-sovereign.
Policy per data class.
Policy per data class.
Different rules for PII, PHI, IP, contracts — per role, per use case. Compliance teams define once, Brane enforces everywhere.
By the numbers
What real-time looks like.
<0ms
Detection latency
From prompt to classified entities — per request, per data class.
0
Data classes
PII, PHI, IP, contracts, financials, source code, patient IDs, trade secrets.
0%
On-prem vault
Token mapping lives on your Brane appliance, never leaves the network.
SHA0
Audit chain
Tamper-evident hash chain over every masking decision — EU AI Act ready.
Talk to us
Mask before it leaks — talk to our engineers.
30-minute live demo. We mask GPT, Claude and a local Llama with the same Brane policy plane.
CONTACT
Let's get in touch.
Request a demo, book a workflow audit, or just say hello — we reply within one business day.
Or reach us directly at: info@ai-z-group.com
AI-Z GmbH · Königstraße 26 · 70173 Stuttgart · Germany
+49 157 52105947