AIROS Gateway · Data protection for everyday AI use

Every AI request checked.
Before it leaves the company.

The AIROS Gateway is the control point between your employees and external AI services such as ChatGPT or Claude. It detects sensitive data, replaces it with placeholders, lets the request through and puts the real data back into the reply. With an audit trail for every single request.

Our own development

Built and measured by AI READY AT.

The Gateway is our own code, not a purchased product. We use it ourselves for every AI request in the company. On a sealed test set of 68,664 made-up sensitive items it detected 99.99 % in thorough mode (as of 2 October 2026). In everyday use the figure depends on text and mode, which is why the audit trail shows every single request.

How a request flows

The original stays with you.
Only placeholders go out.

The gateway runs on the device or in front of your AIROS applications. No cloud service, meaning nothing that runs on someone else's computers on the internet, and no copy of your data with us.

01Original with highlighted findings, stays on the device02Gateway checks, replaces, logs03Only placeholders leave the company

Allow AI in the company.
Without data leaks.

The gateway is not a wall that shuts everything down. Everything gets through, but nothing unchecked. You see which AI services actually run in-house, sensitive data stays on the device, and every request has an auditable record.

13AI providers in the catalogue, unknown ones are recognised by behaviour
268automated tests secure detection and back-translation
1 lineof configuration to connect AIROS applications

Four steps

Detect, check, pseudonymise, log.

All of it happens within milliseconds, before the request leaves the device.

01

Detect

The gateway recognises AI traffic by the behaviour of the request, not only by the provider's name. This makes shadow AI visible that is on no list.

02

Check

The data guard finds credentials, IBANs, card numbers, social security numbers, VAT IDs, health and salary data as well as names, companies and addresses. Checksums prevent an invoice number from being mistaken for an IBAN.

03

Pseudonymise

To pseudonymise means names, account numbers and addresses are replaced with placeholders. Instead of black bars, each finding gets its own placeholder: [PERSON_1], [COMPANY_1], [IBAN_1]. The same person keeps the same placeholder, the AI replies sensibly, and the real data goes back in on the device.

04

Log

Every request is in the audit trail: type, location and number of findings, chained by checksums, tamper-evident. Never the text itself. Auditable, for example for EU AI Act questions.

Security level per provider

You decide how strict.

For each AI service you pick the level in the overview. The change applies immediately to all workplaces.

Strict

All data classes are pseudonymised, including names and companies. The right choice for law firms, HR and finance.

Standard

Credentials, accounts, ID data and health data are always protected, contextual data according to your rules.

Relaxed

Minimum protection only: credentials, cards and accounts stay off limits, names may pass because a task needs them. Visibly flagged in the overview.

For AI agents too

Hidden instructions detected.
Data exfiltration stopped.

AI agents are programs that do computer tasks on their own. As soon as they read documents, open e-mails or operate tools, protecting only the questions you send to the AI is no longer enough. So the gateway also checks what the agent does.

  • 01Injection guardDetects hidden instructions in retrieved documents, e-mails and web pages, including invisible control characters. A sentence in a foreign document weighs three times as much as in a user message.
  • 02Agent guardRates each step of the agent by its effect and spots the typical pattern when data is about to be taken out: read a lot, then send once to an outside address.
  • 03Stops the agent, not the humanA critical run blocks the agent's automatic continuation. If the human writes on afterwards, they have decided. The incident stays visible in the overview.

Who is this for?

Wherever employees work with customer data.

The gateway is a building block of AIROS and can also be used without further AI projects.

Law firms & consulting

Client data stays in-house even when a brief is prepared with ChatGPT. Confidentiality remains enforceable.

Trade & industry

Customer names, prices and terms do not leave the company when quotes or texts are created with AI.

HR & finance

Salaries, IBANs and social security numbers are detected and replaced before they reach a cloud.

Teams with AI agents

Agents that read e-mails and operate tools get a guard against hidden instructions and data exfiltration.

Your next step

Which AI services are already in use at your company?

In one session we look at where AI is used today and set up the gateway together. In person anywhere in Austria or online.