SwitchyAI

SECURITY

SECURITY

Your prompts and your vendor keys stay under your control. This is where the trust boundary sits in each deployment mode.

TRUST BOUNDARYSELF-HOSTED MODE

CALLER

YOUR AGENTS

IN YOUR NETWORK

SWITCHYAI GATEWAY

YOUR KEYS

ANTHROPIC / OPENAI

ONLY COST METADATA REACHES SWITCHYAIYOUR ACCOUNTS
DEPLOYMENT AND DATAHOSTED OR SELF-HOSTED

// SELF-HOSTED MODE

INSIDE YOUR NETWORK.

The gateway runs inside your network. Vendor keys stay in your own secrets manager. Prompts never leave your network: only cost metadata reaches SwitchyAI.

// HOSTED MODE

KEYS ENCRYPTED PER TENANT.

Vendor keys are encrypted per tenant and exist in plaintext only in memory while a request is in flight. A customer-managed key option is available.

// DATA

METADATA ONLY BY DEFAULT.

Prompt bodies are never stored unless you opt in. The routing models learn from task features and outcomes, never from prompt text or code.

// FAIL-OPEN

YOUR DEFAULT MODEL, YOUR KEYS.

If the gateway ever fails, requests fall through to your default model on your own keys.

SOC 2 is on our roadmap; ask us about timing.hello@switchyai.co

START HERE

REQUEST ASHADOW AUDIT.

Free for 14 days, in dry-run on mirrored traffic. Production is untouched, and you get a written report at the end.