Skip to main content
Solutions · Departments

Control and record
employees' AI use

Syncgate handles every AI request your company makes from chat, agents and coding tools. It pseudonymizes personal data, allows only approved models, and records every decision and all administrator activity in a sealed audit log.

Contact details and card numbers replaced with pseudonyms before they are sent to the modelReal product screen
Guideline mapping

Six controls
and the check items they address

Personal (credit) information detection and pseudonymization

Detects 13 data types, including resident registration numbers, account numbers, card numbers and driver's license numbers, in input and output, and blocks or masks them. Only pseudonyms are sent to the model, and the original values are restored when the answer is shown to the user. It can also warn at the input stage and ask the user to record a reason.FSC guideline check 7 · FSS AI RMF privacy · NIS guidebook M13

Layered defense against prompt injection and jailbreaks

On top of blocked-word and regular-expression rules, a guardrail model that judges each sentence in its context runs a second check. With “Pause after repeated violations” turned on, a user is warned after 5 violations and blocked for 30 minutes after 10. These defaults match the compliance example in the guidelines.FSC guideline checks 6, 9 · NIS guidebook M13, M15

Identifying security classification levels (C · S · O)

Classifies documents as Classified, Sensitive or Open (C · S · O) and allows, labels or blocks each level. Classified documents are left out of results sent to external AI tools by default.N2SF Model 2 “AI integration system” · IF-14

Log retention and tamper evidence

Records requests, guardrail decisions and administrator activity. The audit log is kept indefinitely by default, checked for tampering with a hash chain, and sent to your SIEM over syslog in real time.National Cybersecurity Basic Guidelines Art. 55 · NIS guidebook M09 · Compensating controls for financial network separation

Approved models only

Users and company systems do not call models directly. Their requests are sent through the gateway. Only providers and models an administrator has approved are allowed, per group or per user, and request and token limits are set for each user. On an air-gapped network, only self-hosted models are used.NIS guidebook M17 · FSC guideline check 12 · N2SF Model 2

MFA, least privilege and human approval

SSO, SCIM and two-step verification with TOTP or passkeys are supported, and least privilege is applied per group. Two-step verification can be made mandatory for administrators. Tools that change external systems run only after human approval, and the chat input shows the security warning your organization sets.FSC guideline check 24 · National Cybersecurity Basic Guidelines Art. 76 · NIS guidebook M05 · M30 · A-M12

Examples of work done with each harness templateSee workflow demos

See it with
your own documents

In a consultation, we connect a few of your documents so you can check the answer quality for yourself. Send us your questions and our team will get back to you.

Product videosReal product screens · Example company ACME Logistics · 16 videos