Live product
The console, in your language
These are real screens — the language switcher changes the product, not just this page.
Provanis sits between your people and the model, decides every request, and gives you a receipt you can hand to a client.
Nobody records the prompt that left, so nobody can show it later.
A token count cannot name the person who said yes.
Without a receipt, the answer is reconstructed from memory.
Nothing reaches the model before step three decides.
Route resolves, key checked, identity recorded.
Typed segments, local detectors, no cloud.
Allow, redact, review or block.
Six fields written before the reply returns.
Your people and agents on one side, the models on the other. One base URL per tool.
These are real screens — the language switcher changes the product, not just this page.
Six fields, hash-chained, verifiable offline — without trusting this server.
Who sent it, and how strongly proven.
The typed segments it decomposed into.
Allowed, redacted, blocked, or by whom.
Every event carries the hash of the one before it. Tampering is detectable, not just discouraged.
Mark a false flag, and the next similar request is allowed. Report a miss, and it goes to whoever writes the rules.
A review that was not necessary becomes a suppression precedent. High-severity identity numbers are never auto-allowed.
A report for the rule authors — it never changes past decisions on its own.
Every human decision becomes a precedent, cited in the receipt, spot-checked, and auto-disabled if it drifts.
| Capability | DLP | Firewall | LLM router | Provanis |
|---|---|---|---|---|
| Inspects the prompt | — | — | partly | ✓ |
| Decides per request | — | — | routing | ✓ |
| Named approval with expiry | — | — | — | ✓ |
| Per-request receipt, verifiable offline | — | — | — | ✓ |
| Sees files, email, USB | ✓ | partly | — | — |
That is the category, in one line. If the boundary fits your firm, the pilot takes an afternoon.
On a public corpus, scored against Microsoft Presidio. The misses are printed, not hidden.
Method and harness are published — re-run it on your own prompts before you sign.
Bring the request you would least like to explain tomorrow. That is the one that shows whether the receipt is real.
No. A gateway only sees traffic that goes through it. Desktop chat with no endpoint, files, email and clipboard are out of scope — we say so before you buy.
No. It produces evidence. It does not certify a model, a prompt or a firm.
On your own infrastructure. Detectors run locally. Raw prompts are not stored.
The console ships in English, Traditional and Simplified Chinese, and Japanese. Detection covers HK, CN, TW, JP, KR and US identifiers.