Compliance and Governance

The gateway sits in the request path, which makes it the natural enforcement and evidence point for compliance requirements: where data is processed, which tools are reachable, how long records are kept, and how administrative actions and policy decisions reach the organization's audit tooling.

---

Configure data residency and no-retention

Pin processing to a region and keep providers from retaining prompts.

Control request log data

Decide whether prompt and response bodies are recorded, and where they land.

Manage log retention and purge

Set retention windows and purge records on demand.

Export audit and policy decisions to a SIEM

Stream audit events and guardrail decisions into existing security tooling.

Govern MCP server access

Vet MCP servers centrally and decide which tools reach developers.

Audit Agent Router activity

Trace who changed what and when, and read aggregated usage.