Listing Thumbnail

    Sovereign AI Gateway Deployment - PII-Masked Access to Amazon Bedrock

     Info
    Deployment of a sovereign AI gateway in your infrastructure: per-user keys and budgets, multilingual PII masking before egress, Cloudflare Zero Trust tunnels, MCP server configured on your own edge hosts - governed access to Amazon Bedrock (Claude models). Software and configuration only; no hardware is supplied.

    Overview

    HYBT Sovereign AI Gateway gives organizations governed, budget-controlled access to Amazon Bedrock foundation models (Anthropic Claude Sonnet and Haiku) without exposing raw internal data to any hyperscaler.

    HOW IT WORKS. Your own edge hosts (customer-provided Linux machines, for example NVIDIA Jetson Orin Nano devices you already own) reach the gateway through Cloudflare Zero Trust tunnels - no inbound ports anywhere. The gateway (LiteLLM) authenticates each user with a personal key, enforces per-user budgets, masks PII (emails, phone numbers, payment cards, IBAN, crypto wallets) with multilingual NLP models via Microsoft Presidio inside your perimeter, and only then forwards the sanitized request to Amazon Bedrock via least-privilege IAM. An MCP server configured on your edge hosts exposes governed tools to AI agents and Claude Code.

    WHAT AWS SERVICES IT RELATES TO: Amazon Bedrock (InvokeModel / InvokeModelWithResponseStream), with optional EU inference profiles for data-residency requirements.

    WHAT YOU GET (software and configuration only - no physical hardware is sold, shipped or supplied through this listing): gateway deployment (Docker Compose: LiteLLM + Presidio + Postgres) installed in your infrastructure; Cloudflare Zero Trust tunnel configuration; per-user key and budget setup; multilingual PII masking policy configurable per language; software configuration of your customer-provided edge hosts with MCP server and Claude Code; admin panel with per-user spend visibility; key lifecycle scripts (issue / renew / revoke); admin training and documentation.

    WHO IT IS FOR: organizations in regulated environments - government, healthcare, finance, education - that need frontier-model access with data sovereignty, audit and cost control. Lost devices are not security incidents: keys revoke with one API call; no credentials live on the edge.

    Fixed-fee deployment by HYBT Technologies, Inc.: gateway installation in your infrastructure, software configuration of your customer-provided edge hosts, key and budget setup, PII policy configuration, admin training and handover. All hardware is obtained by the customer separately. Contact us for scope and a private offer.

    Highlights

    • PII masked inside your perimeter with multilingual NLP (Microsoft Presidio) - Amazon Bedrock receives sanitized text only; AWS keys never leave the gateway
    • Per-user keys and budgets (LiteLLM), Cloudflare Zero Trust tunnels, zero inbound ports, one-call key revocation
    • MCP server configured on your customer-provided edge hosts (e.g., NVIDIA Jetson) exposes governed tools to AI agents and Claude Code; optional EU inference profiles

    Details

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Pricing

    Custom pricing options

    Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Resources

    Support

    Vendor support

    Email support: support@hybt.ai  (response within 1 business day). Engineering contact: dev@hybt.ai . Support covers the deployment engagement and a 30-day post-handover assistance period included in the fixed fee. Extended support available by agreement.