GATE · built into every DNSHN product →
DNSHN
BUILT INTO LOOP · ECHO · ATLAS · MOONLIGHT

GATE

Your data doesn't leave your stack raw. A local gateway masks personal data before it reaches the LLM and decrypts the answer back on your side.

Not a standalone product. Part of every DNSHN module.

GATE 01 WHAT IT IS
Positioning

Not a firewall. Not a VPN. A layer between your stack and cloud AI

When LOOP analyzes deals — customer names don't fly to the cloud. When ECHO replies — the model sees "customer #4713", not Maria Sokolova. When ATLAS enriches ICP — the names of your target accounts don't settle in someone else's context window.

It happens without your involvement: GATE sits between DNSHN products and LLM providers (Claude, OpenAI). It catches personal data in text and tables, replaces it with placeholders, and after the model responds — puts everything back on your side.

GATE 02 HOW IT WORKS
Mechanics

Four steps. One cycle

YOUR STACK CRM · Sheets · HubSpot · Ads raw data 01 · raw GATE detect → tokenize [PERSON_1] [MONEY_1] 02 · masked CLOUD Claude · OpenAI sees placeholders not your data 03 · reply GATE unredact → readable → Maria · 100k 04 · back to your stack — already decrypted
01 · RAW

Your stack ships data

CRM, Sheets, ad accounts — as you have them. We don't migrate anything.

02 · MASK

GATE tokenizes

Names, phones, emails, IDs, tax numbers, amounts — into placeholders. Mapping key stays local, with you.

03 · REPLY

Cloud works blind

Claude/OpenAI sees the task shape, not the content. Their training set doesn't see it either.

04 · RETURN

Decrypt on your side

GATE reads the response on your side, puts names and numbers back in, hands it to the DNSHN product.

GATE 03 LIVE EXAMPLE
One query, three states

What the cloud sees vs. what you see

01 · your input
Customer: Maria Sokolova
Phone: +1 415 555-11-22
Deal amount: $12,000
Note: pushed payment
to next Monday.
→
02 · what leaves your stack
Customer: [PERSON_1]
Phone: [PHONE_1]
Deal amount: $[MONEY_1]
Note: pushed payment
to next Monday.

Model responds: "[PERSON_1] — cancel probability low, 3-day push within norm. Ping a day before." GATE puts it back: "Maria Sokolova — cancel probability low…"

GATE 04 WHAT GATE CAN DO
Three maturity levels

We do two. For the third, we honestly say "not our fit"

we do · built-in
LEVEL 01

Detection & Tokenization

Catches names, phones, emails, passport IDs, tax numbers, national IDs, account numbers. Swaps them for placeholders, keeps the mapping locally.

Covers 80% of scenarios in LOOP, ECHO, ATLAS, MOONLIGHT.

we do · built-in
LEVEL 02

Numeric preservation

Amounts, CPAs, budgets get replaced with numbers of the same order of magnitude. The model can reason about scale; the exact value only unlocks on your side.

Lets the LLM tell "large deal" from "small", without seeing the actual figure.

we don't
LEVEL 03

Structural anonymization

Shipping a raw database to the cloud while keeping analytic validity. Differential privacy, secure MPC, homomorphic encryption.

If that's really your job — you need an on-prem LLM, not a gateway. We'll say so upfront.

GATE 05 WHAT WE DON'T DO
Straight talk

Edges. So there's no surprise in production

WORKS · CONTOUR 01

Tabular data with clear structure: deals, leads, payments, ad accounts. The LLM answers a specific question — the answer is meaningful.

WORKS · CONTOUR 02

Client conversations: names and phones get masked, content stays — ECHO responds in brand voice without knowing who exactly it's talking to.

WEAKENED

Free-form reasoning about the person ("who's this customer, how to close them"). Without a name the model loses gender, role, emotional cues. Answers turn averaged.

DOESN'T WORK

Exact arithmetic on masked amounts: "sum this column" gives an order of magnitude, not an exact figure. For financial audit GATE won't replace on-prem.

NOT A GUARANTEE

We don't sign compliance certificates. We substantially cut the leak surface — but full compliance needs an on-prem LLM plus legal wrapping.

WHAT WE PROVIDE

A technical layer + documentation: what gets masked, what doesn't, where the mapping lives, how to revoke keys. Enough to pass a security review.

GATE 06 WHERE IT'S INCLUDED
One layer, four products

GATE ships with every DNSHN module, no separate invoice

GATE 07 STACK
07 / STACK

Open-source core. Local storage. Transparent rules

DetectionMicrosoft Presidio + custom recognizers for the geographies we work in
MappingSQLite (dev) · Postgres (prod) · Redis for session tokens
ProxyFastAPI on top of OpenAI and Anthropic APIs. Runs on localhost or in your VPC
RulesColumn policies: DROP · REDACT · TOKENIZE_NUMERIC · HASH · PASS

Deploy — docker-compose, one command. Data doesn't leave your perimeter except in masked form. Mapping keys stay on your side; we don't see them.

Want to walk through your specific case?

Within 24 hours we'll say what GATE will mask in your data — and what it won't — with an example on a real fragment (no PII in the answer).

Free audit in 24 hours ↗