dunpai sits between your app and any LLM — OpenAI, Anthropic, Mistral, or self-hosted. It strips personal data before it reaches the model and logs everything for GDPR. The AI never sees real PII. Change one URL and you're compliant.
Every request is scanned for personal data — emails, phone numbers, IBANs, credit cards, tax IDs, IP addresses. Detected PII is replaced with tokens before the LLM sees it.
Sanitized requests are forwarded to your LLM — OpenAI, Anthropic, Mistral, or self-hosted. Bring your own model and API key. PII tokens are restored in the response before it reaches your app.
Every request is audit-logged. Generate GDPR Article 30 reports with one click. Handle Data Subject Access Requests automatically. Show regulators exactly what happened.
Under GDPR, anyone can ask this. You have 30 days to answer. If your AI processed their email, phone number, or IBAN — you need to prove what happened to it.
dunpai stores a one-way hash of every PII value it detects — not the value itself. When a DSAR comes in, we hash the identifier and match it against the audit trail. We find every processing event without ever storing the raw personal data.
1. Receive DSAR from hans@acme.de
2. Search your logs — but you don't log AI prompts (privacy risk)
3. Ask engineering to grep production databases
4. Find nothing because raw prompts were never stored
5. Reply "we have no records" and hope the regulator believes you
Weeks of work. No confidence in the answer.
One API call. Every processing event. Without storing the raw data.
Keep using OpenAI, Anthropic, Mistral, or any provider. dunpai is a proxy — pass your upstream API key and we strip PII before it reaches them. Streaming supported.
Emails, phone numbers, IBANs (checksum-validated), credit cards (Luhn-checked), EU VAT numbers, IP addresses, dates, postal codes. Sub-millisecond scanning.
Auto-generated records of processing activities. Daily breakdown of what data was processed, which models were used, and what safeguards were applied.
When someone asks "what did you do with my data?", search by email or phone number and get every processing event — without storing the raw data.
Real-time metrics, PII detection charts, audit log browser, compliance report generator, tenant management. All in a dark, professional interface.
dunpai runs on EU infrastructure. Personal data is stripped before reaching any AI provider — even US-based ones. The LLM only sees sanitized tokens, not real data.
All features included. Always. You only pay for volume.
Cheapest rate. Price follows our infrastructure costs.
Get startedPredictable costs. Rate guaranteed for one year.
Get started