Honest about what we do — and what we don't claim
CloakGate is built to reduce sensitive data exposure and give you control and audit over AI traffic. We are deliberately precise about what that means.
- ✓ Prompt content is not stored by default.
- ✓ Metadata-only audit by default.
- ✓ Credits and hard limits reduce abuse.
- ✓ Project-level API keys, revocable at any time.
- ✓ Provider credentials encrypted internally.
- ✓ Data retention controls (planned).
- ✓ EU-first product direction.
- ✓ CloakGate reduces exposure before data reaches model providers.
- ✕ “Fully secure” or “zero risk”.
- ✕ “No data ever leaves”.
- ✕ “GDPR guaranteed”.
- ✕ Certifications we do not hold (SOC 2, ISO 27001, HIPAA).
- ✕ “Military-grade encryption” without proof.
- ✕ “End-to-end encrypted AI” in a misleading sense.
Once a cloaked request reaches a model provider, that provider processes it under their own terms. CloakGate reduces what is sent — it does not control the provider's internal handling. Provider processing depends on the model you select.
The CloakGate website, gateway and supporting infrastructure are protected by an independent security partner. We rely on cybersecurity and infrastructure protection by Datahorses for penetration testing, continuous monitoring and defence of our cyber infrastructure. Findings are reviewed and addressed as part of our regular engineering work.
Start using AI through a safer gateway
Prepaid credits, known models, sensitive data cloaked before it leaves your app. Join the developer preview.