# Secure AI

> A redaction API. It finds the people in a piece of text — names, emails,
> phone numbers, addresses, card and account numbers — and swaps them for
> plausible stand-ins before the text reaches a language model, then puts the
> real values back in the model's reply.

Built for teams who want to use a model on text they are not allowed to send
to one. The substitution is the point: a model handed `[NAME]` writes about
`[NAME]` and the answer comes back needing repair, where a model handed a
name writes an ordinary sentence.

## What it does

- Takes identifying detail out of text before it is sent anywhere
- Puts it back in the answer, so the reader sees what they wrote
- Works in front of any model — Anthropic, OpenAI, Google, or your own
- Never stores the mapping between a stand-in and a real person

## Endpoints

- `POST /v1/redact` — text in, stand-ins out, plus the map
- `POST /v1/restore` — the model's answer and the map, real values back
- `POST /v1/proxy/chat/completions` — all three steps in one request, using
  your own model vendor key. OpenAI-compatible, so an existing client needs
  only a new base URL
- `POST /v1/chat/completions` — the same, using our models
- `GET /v1/usage` — what the account has used this month

Base URL: https://secureai.one/v1
Authentication: `Authorization: Bearer sai_...`

## For assistants and agents

There is a remote MCP server at https://secureai.one/mcp offering two tools,
`redact` and `restore`. Add it with an `Authorization: Bearer sai_...` header
and an assistant can strip personal detail from text before sending it
onward, then put it back in the reply, without anybody writing the calls.

## Docs

- [API reference](https://secureai.one/developers/docs): endpoints, fields,
  errors, limits
- [Developers](https://secureai.one/developers): what it is and what it costs

## Pricing

$49 a month, including 50,000 requests. $0.001 per request after that, taken
from a balance bought in advance. Your own model spend stays yours — we never
see it.

## Limits worth knowing before you build

- A person is found by the words around them. A name in a labelled record is
  found reliably; a name in the middle of a sentence is best-effort, and the
  response says which happened via `names_decided`
- The map is returned and never stored. Lose it and that answer cannot be
  restored — which is deliberate, since holding it would mean holding the
  table that turns redacted text back into real people
- 200,000 characters per redact call; 60 requests a minute per key