Shim Enterprise
One trust boundary for your AI traffic
Shim sits between your applications and OpenAI, Anthropic and Gemini. It masks personal data, controls spend and keeps a record you can prove. Change one base URL, keep your SDK.
- OpenAI, Anthropic, Gemini
- Turkish PII built in
- Source-available
Your code
Python · the only change is the base URL
from openai import OpenAI client = OpenAI( base_url="https://api.getshim.tech/v1", api_key="your-shim-key",)
The provider receives
Email <EMAIL_ADDRESS_75344f…> about the invoice
Your caller gets the reply with the real address restored.
On every request
Four checks, in the request path
- 01
Mask
Emails, cards, IBANs, Turkish IDs and secrets become placeholders. The reply is restored.
- 02
Admit
Rate limits, a model allow-list and loop detection run before anything is billed.
- 03
Forward
The request stays provider-native. One billable attempt, no silent retries.
- 04
Account
Tokens and cost are recorded per request and tagged to a team or project.
Enterprise adds
What security and finance teams ask for
Tamper-evident audit trail
Hash-chained records you can verify from the console.
Spend and budgets
Cost by team, project and key, with budgets.
Human review
Flag requests by model, data type or severity for a person to review.
Compliance reports
Evidence mapped to KVKK, GDPR, the EU AI Act, SOC 2 and ISO 27001.
Workspaces and roles
Owner, admin and member access for every workspace.
Your own keys
Provider keys stay in AWS, GCP or Azure secret managers.
Community or Enterprise
Open source to try it. Enterprise to run it.
The community gateway is made for a first trial. Production needs a record you can prove, limits that hold across every replica and people who own the policy. That is Enterprise.
| Feature | Community | Enterprise |
|---|---|---|
| PII masking and cost per request | ||
| Audit trail you can prove | ||
| Budgets, roles and human review | ||
| Compliance reports | ||
| Limits across replicas | Per process | Shared |
| Request history | None kept | Retained |
On-prem
Run Enterprise on your own servers
- Prompts, audit records and keys stay inside your network. Only the masked request reaches the provider.
- Runs on your PostgreSQL and Redis, with Docker images you can inspect.
- The license is verified offline. Nothing calls home.
Bring Shim to your team
Tell us about your stack and your compliance needs. We will scope the rollout with you.
For your developers
Protect coding agents too
Shim CLI finds secrets and personal data in what Claude Code, Codex and Copilot send, right on each developer's machine.
Explore Shim CLI