The Trinito AI Gateway

Why an appliance, not SaaS or software-only

The on-premise architecture is the product. Move the sanitiser to the cloud and your data has to travel through that cloud to be redacted — the exact problem this product exists to solve. The appliance is what makes every other promise on this page literally true.

1. 1. Prompts never leave unredacted Redaction runs in your building. SaaS prompt-firewalls handle raw content in transit to do their job. We do not — because the box is on your LAN.
2. 2. The audit log is yours If Trinito vanishes, the log remains. A regulator gets a USB export from hardware you own — not a tenant in someone else's cloud.
3. 3. Network-level coverage Every device on the office network — laptops, phones, iPads, BYOD — not only browsers with an agent installed.
4. 4. Hardware acceleration included The integrated NPU runs sanitisation and local inference fast without bolting on extra kit.
5. 5. One platform to support Tested updates on a known box — not "any Linux VM you happen to have."

Five stages. Layered defence.

Each stage has a job. Together they catch UK personal identifiers, contextual business references that could identify a client or matter, and your internal IDs.

1. 01

   Regex pass

   UK personal identifiers — postcodes, NI and NHS numbers, VAT numbers, IBANs, sort codes, Luhn-validated cards, email, phone — plus contextual business references (claim numbers, case refs, NHS client IDs) where pattern packs apply. Fast and precise.

2. 02

   Named entity recognition

   A local spaCy model finds person names, organisations, places, and money references that no regex can reliably catch.

3. 03

   Custom rule pack

   Custom rules for your internal IDs, project codenames, internal product names, and supplier names. Loaded per organisation by your admin.

4. 04

   Optional LLM cross-check

   A small local model gets a second look at the prompt; configurable per organisation, off by default for latency, on by default in regulated tiers.

5. 05

   Deduplication and approval

   Findings are merged, the user sees the sanitised version, and one click sends it.

On the way back, placeholders are restored so the letter reads naturally.

Files stay on the appliance. Only sanitised text is sent.

Use any model. Control who uses what.

The Gateway can route to:

• Local models on the appliance Qwen 2.5, Llama, and others — included with the appliance.
• Trinito Cloud Our managed subscription — monthly token allowance on Compact and Standard, customer-cancellable. Free starter allowance bundled so the box is useful from day one.
• Your own keys BYO OpenAI, Anthropic, and Google. Keys stored encrypted on the appliance (libsodium secret-box) and used directly from the box.

In every case, the appliance talks to the LLM provider directly. Trinito's servers are not in the prompt path — we never see the prompt, response, or your API key. Our licensing server only issues signed config (subscriptions, caps) on a daily check-in. The admin chooses per-model access, credentials, and catalogue additions.

Every prompt processed. Every redaction. On the appliance.

An append-only, hash-chained audit log records every prompt processed, every redaction decision, and every external send. The log stores cryptographic hashes of prompt and response content — not the content itself — so we can evidence what happened without retaining the underlying personal data. Tampering with the chain is detectable on export; the database enforces append-only behaviour via a row-level trigger. Compliance can export from the appliance on demand.

Conversation history — which does retain prompt and response text for user reference — lives in a separate per-user store on the appliance, with per-conversation deletion controls and full erasure on user request.

Three appliances. Capability scales with tier.

Specs-first overview. See pricing for list prices.

Coming next: ChatGPT, Claude, and Gemini in the browser.

The Trinito extension for Chrome and Edge will route prompts from chat.openai.com, claude.ai, and gemini.google.com through your office Gateway — Prompt Shield in the toolbar when enabled. Until it ships, staff use the Trinito chat UI and API; network-level controls still apply to traffic through the appliance.

Get notified when the extension ships

Shipping in v1. Planned next.

What installation looks like.

• Plugs into your office network
• First-boot configuration via local web UI
• Active Directory / Entra ID single sign-on
• MFA out of the box
• Remote management via Trinito's secure tunnel (opt-in, signed WireGuard, off by default for air-gapped customers)

Four options, one that actually works.

The homepage table, expanded for buyers who need the detail.