AI data control plane

Your data. Your rules. Any AI model.

JanusTB sits between your company’s data and every AI model. Each request is checked — who is asking, what data is sent, where it may go — then allowed, redacted, routed or blocked. Every decision is recorded.

  • Live in production
  • Hosted in France
  • SSO with Google & Microsoft
AI request · janustb Illustrative demo
  1. Request Summarise the Q3 financial report
  2. Identity alice · Finance
  3. Data Confidential · financial
  4. Policy confidential stays in EU
  5. Decision
  6. Model Mistral · EU
  7. Audit evt_8f3a29 recorded

Works with

The problem

Company data now flows to AI from everywhere. Nobody controls it.

Apps, agents and RAG assistants send data to AI providers through APIs. Employees paste it into chatbots. Each connection has its own rules — and no one can say which data went to which model.

0%

of companies whose AI apps were breached had no proper AI access controls

IBM Cost of a Data Breach, 2025

0%

of AI data-policy violations in Europe involve customer, personal or financial data

Netskope, 2026

0%

of AI data-policy violations worldwide involve source code

Netskope, 2026

01

Data exposure

Sensitive data reaches external providers with no check on what it contains or who sent it.

02

Model lock-in

Each app is wired to one provider. Changing model means rebuilding the integration.

03

No central visibility

Security and compliance teams cannot see who sent which data to which model, under which rule.

How it works

Every request goes through five steps.

Scroll to follow one request through JanusTB.

janustb · request traceIllustrative demo
Request

Pay supplier invoice, IBAN FR76 3000 6000 0112 3456 7890 189 Pay supplier invoice, IBAN [REDACTED]

From Aalice@acme.eu · Finance · SSO
Scan ⚠ IBAN detected
Rule personal data → redactREDACTED
Audit
{ "event": "evt_2c81f0",
  "user": "alice@acme.eu",
  "decision": "redact",
  "entities": ["iban"],
  "model": "mistral-eu" }
✓ Sent to Mistral · EU
  1. 01

    Intercept

    Apps and agents call one JanusTB API instead of each provider. Employees are covered by the browser extension.

  2. 02

    Identify

    JanusTB knows who is asking: single sign-on identity, role and organisation — or the app’s scoped key.

  3. 03

    Inspect

    The content is scanned for personal data, secrets and confidential information: IBANs, card numbers, national IDs, API keys and more.

  4. 04

    Decide

    The policy engine applies your rules and returns one decision: allow, redact, route or block.

  5. 05

    Record

    The decision, the policy and the model are written to the audit trail — ready for your auditor or your SIEM.

Architecture

The layer between enterprise data and AI.

Every flow — from apps, agents, RAG assistants and employees — goes through one control plane before it reaches a model.

Internal appsAI agentsRAG assistantsEmployees · browser OpenAIAnthropicMistralAzure OpenAILocal models · Soon JanusTB CONTROL PLANE Internal appsAI agentsRAG assistantsEmployees OpenAIAnthropicMistralAzure OpenAILocal · soon JanusTB CONTROL PLANE
Allowed Redacted Blocked Local and private models, SharePoint, S3 and SQL connectors are on the roadmap.
Shadow AI control

See what leaves before it leaves.

Employees paste sensitive data into AI chats every day. The JanusTB browser extension checks each message before it is sent.

  • Works on ChatGPT, Claude, Gemini and Mistral
  • Detects IBANs, card numbers, national IDs, secrets and more
  • Block, warn or log — your policy decides
  • Fail-closed: if JanusTB is unreachable, nothing is sent
  • Available on the Chrome Web Store
Policy mode
AI chat · protected by JanusTBIllustrative demo
Hello! How can I help you today?
EditSend anyway
⚠ IBAN detected JanusTB Send ↗
Policy playground

Build once. Choose your model. The policy decides.

Change the request and watch JanusTB decide. The rules shown are an illustrative example of a policy you would write.

Data classification
Sensitive content
Requested model
Decision
→

policy.yamlIllustrative demo
policy: data-to-ai-v1rules:  - if: content.secret    action: block  - if: classification == confidential    allowed_models: [mistral-eu, azure-openai-eu]    otherwise: route mistral-eu  - if: content.personal_data    action: redact  - default: allow
Governed RAG

Answers from your documents. Only what each user may see.

Every passage is checked against the user’s identity, role and the document’s classification before it can enter the model context.

Ask as

Relevant context, authorized access.

Retrieval uses the same policy engine as the gateway. Confidential documents are never sent to external embedding providers.

Control center

Know what your AI is doing.

One view of every request, decision, model and policy — with evidence you can hand to an auditor.

JanusTB · Control center System operational Demo data
AI requests 0 last 30 days
Allowed 0 95.4%
Redacted 0 3.1%
Blocked 0 1.5%
User / appDataModelDecision
Evidence bundle

Generate a PDF of decisions, policies and models for a period — ready for your auditor.

Or pull audit events into your SIEM (NDJSON).

Built for European companies

Control you can show to your auditor.

Hosted in France

Production runs on OVHcloud in France.

Single sign-on

Google Workspace and Microsoft Entra ID, with optional enforced SSO.

Fail-closed

If JanusTB is unreachable, requests are blocked, not let through.

Scoped API keys

Each key has one purpose. An extension key cannot read audit data.

Audit export

PDF evidence bundle and SIEM export. Exports never include prompt text.

GDPR ready

Data processing agreement and privacy policy available.

Security details →

Deployment

Starts on European cloud. Your infrastructure next.

EU

OVHcloud · France

Our production environment today.

● Live
AWS

AWS

Deploy where your infrastructure lives.

Roadmap
AZ

Azure

For Microsoft-centred companies.

Roadmap
ON

On-premise

Private deployment for large accounts.

Roadmap
Design partner programme

Take control of your AI stack.

We are working with a small group of European companies as design partners: three months free and direct access to the founders.