Control and record
employees' AI use
Syncgate handles every AI request your company makes from chat, agents and coding tools. It pseudonymizes personal data, allows only approved models, and records every decision and all administrator activity in a sealed audit log.
Features for information security and audit
Guardrail policies
Detects 13 types of personal data and prompt injection at 13 enforcement points, and checks similarity to confidential documents.
Learn moreCode gateway
Applies blocklists and allowed-model policies to 11 developer coding tools.
Learn moreSealed audit logs
A hash chain verifies the integrity of the audit log, and syslog sends it to your SIEM.
Learn moreDocument sensitivity classification
Classifies documents into Korea's N2SF Classified, Sensitive and Open levels, and handles each by its level.
Learn moreSix controls
and the check items they address
Personal (credit) information detection and pseudonymization
Detects 13 data types, including resident registration numbers, account numbers, card numbers and driver's license numbers, in input and output, and blocks or masks them. Only pseudonyms are sent to the model, and the original values are restored when the answer is shown to the user. It can also warn at the input stage and ask the user to record a reason.FSC guideline check 7 · FSS AI RMF privacy · NIS guidebook M13
Layered defense against prompt injection and jailbreaks
On top of blocked-word and regular-expression rules, a guardrail model that judges each sentence in its context runs a second check. With “Pause after repeated violations” turned on, a user is warned after 5 violations and blocked for 30 minutes after 10. These defaults match the compliance example in the guidelines.FSC guideline checks 6, 9 · NIS guidebook M13, M15
Identifying security classification levels (C · S · O)
Classifies documents as Classified, Sensitive or Open (C · S · O) and allows, labels or blocks each level. Classified documents are left out of results sent to external AI tools by default.N2SF Model 2 “AI integration system” · IF-14
Log retention and tamper evidence
Records requests, guardrail decisions and administrator activity. The audit log is kept indefinitely by default, checked for tampering with a hash chain, and sent to your SIEM over syslog in real time.National Cybersecurity Basic Guidelines Art. 55 · NIS guidebook M09 · Compensating controls for financial network separation
Approved models only
Users and company systems do not call models directly. Their requests are sent through the gateway. Only providers and models an administrator has approved are allowed, per group or per user, and request and token limits are set for each user. On an air-gapped network, only self-hosted models are used.NIS guidebook M17 · FSC guideline check 12 · N2SF Model 2
MFA, least privilege and human approval
SSO, SCIM and two-step verification with TOTP or passkeys are supported, and least privilege is applied per group. Two-step verification can be made mandatory for administrators. Tools that change external systems run only after human approval, and the chat input shows the security warning your organization sets.FSC guideline check 24 · National Cybersecurity Basic Guidelines Art. 76 · NIS guidebook M05 · M30 · A-M12
Related pages
Examples of work done with each harness templateSee workflow demos
See it with
your own documents
In a consultation, we connect a few of your documents so you can check the answer quality for yourself. Send us your questions and our team will get back to you.

