Which providers does it work with?

OpenAI chat completions and the Anthropic messages API, through the proxy or the Python and Node SDKs. Azure OpenAI, other OpenAI-compatible gateways and self-hosted models are not supported yet — tell us which one you need and it moves up the list.

Is my data encrypted?

All prompts and responses are encrypted at rest using AES-256-GCM via Cloak. API keys are hashed with HMAC-SHA256. All connections use TLS.

Does it capture agent tool calls?

Yes. Tool calls made by agents — both inputs and outputs — are captured automatically in the proxy path. The rule engine evaluates tool inputs for PII and secrets, and every call is recorded in the audit log with the JSON path of any violation.

How does the free trial work?

Every new app gets 100 free requests with no credit card required. When you're ready to go unlimited, plans start at $49/month (Starter) or $149/month (Growth), billed per app. Enterprise plans are available for custom requirements.

Compliance control plane for AI

Every AI request,
accounted for.

SignalVault sits between your application and the model provider. It records each prompt, response and tool call, stops the requests that carry sensitive data before the provider sees them, and keeps an audit trail you can hand to anyone who asks.

Start with 100 free requests Read the documentation

v0.15.0 Dashboard Redesign →

EncryptionAES-256-GCM at rest

CompatibilityOpenAI and Anthropic APIs

Added latencyNone in mirror mode

Operated fromStockholm, Sweden

production-api Live · last 30 days

Export CSV Export JSON

Requests

1,247

Violation rate

2.4%

Cost

$48.32

Top violation

PII detected · 18

14:23:08 Summarize the customer feedback from the Q4 report gpt-6-astra 1,204 allowed

14:22:51 Update the account for John, SSN 423-91-8812 gpt-6-astra 342 blocked

14:22:34 Generate a marketing email for the spring launch claude-sonnet-5 2,891 allowed

14:21:12 Analyze user metrics for account acct_38… gpt-6-astra 1,823 flagged

14:21:57 Translate this support ticket to Spanish gpt-6-astra 567 allowed

14:20:45 Write unit tests for the payment module claude-sonnet-5 3,412 allowed

AI moved into production faster than the controls around it. SignalVault puts them back in place.

Detection

Sensitive data stops before the provider sees it.

Email addresses, US social security numbers, card numbers, phone numbers, API keys and tokens are identified on every request. You decide per application whether a match blocks the request, is flagged for review, or is redacted so the value never reaches the stored record.

Received from application

Update the account for John, SSN 423-91-8812, using key sk-prod-8f2a…

Written to the audit trail

Update the account for John, SSN 423-91-8812, using key sk-prod-8f2a…

Findings

1 PII · 1 secret

Action

Redacted

Notified

Webhook · email

Audit record req_7Hk2…9fQa

Recorded2026-09-25 14:22:51 UTC

Applicationproduction-api

Modelgpt-6-astra

Tool callslookup_account · update_record

RulePII · US Social Security number

DecisionBlocked

PayloadEncrypted, AES-256-GCM

Tokens · cost342 · $0.0021

Audit trail

The answer is ready before anyone asks.

Every prompt, response and tool call your agents make is stored, encrypted, with the rule decisions that applied. When a customer, auditor or your own security team asks what the AI did, export the record as CSV or JSON — the evidence a security questionnaire, a GDPR request or your own SOC 2 audit asks for.

About compliance exports

Integration

Minutes to install. Nothing to rewrite.

Wrap your existing OpenAI or Anthropic client with the Python or Node SDK, or point it at the proxy with one added header. Mirror mode records without sitting in the request path.

Quickstart→ Python SDK→ Node.js SDK→

import OpenAI from 'openai';

// Point at SignalVault's proxy — no SDK needed.
const client = new OpenAI({
    apiKey: process.env.OPENAI_API_KEY,
    baseURL: 'https://api.signalvault.io/proxy/openai/v1',
    defaultHeaders: {
        'X-SignalVault-Key': 'sk_live_...',
    },
});

const response = await client.chat.completions.create({
    model: 'gpt-6-astra',
    messages: [{ role: 'user', content: 'Hello!' }],
});

Data handling

A trust layer has to earn trust itself.

This is exactly how we handle what passes through SignalVault. No marketing language.

Full security documentation

Storage: Prompts and responses encrypted at rest with AES-256-GCM
API keys: Hashed with HMAC-SHA256, never stored in plaintext
Transport: TLS on every external connection; internal traffic over an encrypted private network
Data region: Stockholm, Sweden
Retention: 30 days on Starter, 90 on Growth, up to 365 on Enterprise
Operator: Elvar, Stockholm, Sweden

Changelog

Maintained in the open.

Every release, security fix and change is published with a date. So is our uptime.

Full changelog Status and uptime history→

v0.15.0 2026-10-12 Dashboard Redesign → v0.14.0 2026-10-01 Streaming Tool Guardrails, Security & Documentation → v0.13.3 2026-09-27 Starter Environments & Integration Fixes → v0.13.2 2026-09-05 Trial & Onboarding Fixes →

Questions

Before you route production traffic.

Anything else? Contact us — you'll hear back from the person who builds it.

Rule evaluation adds minimal latency. If you need zero added latency, mirror mode logs requests asynchronously without sitting in the request path.

Know what your AI
is sending.

100 free requests, no card required. Plans from $49 per application per month.

Get started Pricing

Every AI request,accounted for.