Overview
Data Guard is an HTTPS API that finds and redacts PII, PHI, and secrets before they reach an LLM prompt, a log, a support ticket, or a third-party service.
- POST /scan: find sensitive values without changing anything
- POST /redact: redact by policy and return an audit receipt
- POST /restore: reverse an encrypted redaction with your key
- POST /check: pass or fail a document against a compliance pack
- GET /detectors: list entity types, policy packs, and strategies
Detection is deterministic, with no ML model: check digits, issuer prefixes, field-name rules, and curated word lists, so every finding names the rule behind it. JSON, NDJSON, YAML, and CSV are redacted value by value and still parse afterwards.
Seven redaction strategies, including masking, keyed hashing that keeps data joinable, and reversible AES-GCM encryption. Policy packs for HIPAA Safe Harbor, PCI-DSS, GDPR, and secrets scrubbing. Every call returns an audit receipt with counts and hashes, never raw values.
Nothing about a request is retained, and redaction keys are never stored. No SDK and nothing to deploy: subscribe, get an API key, and call the API.
Highlights
- Deterministic detection you can audit: check digits, issuer prefixes, and field-name rules across 64 entity types covering PII, PHI, payment data, and credentials. No ML model, so every finding names the rule that produced it.
- Structure-aware redaction with seven strategies, including deterministic keyed tokens that keep redacted data joinable and reversible AES-GCM encryption. JSON, NDJSON, YAML, and CSV still parse afterwards.
- Compliance packs for HIPAA Safe Harbor, PCI-DSS, and GDPR, with an audit receipt on every call that carries counts and no sensitive values.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Description | Cost/month |
|---|---|---|
Monthly subscription | Monthly access to all endpoints. Includes 25,000 calls and 1 GB/month. | $49.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Description | Cost/request |
|---|---|---|
API calls (per 1,000) | API calls beyond 25,000 a month, billed per 1,000. Refused calls free. | $0.30 |
Document volume (GB) | Data beyond 1 GB a month, billed per GB. Refused calls not counted. | $0.05 |
Vendor refund policy
Try the free trial: no charge, up to 10,000 API calls or 1 GB of data, and it never becomes paid on its own. A subscription is the contract fee plus metered usage.
Cancel through AWS Customer Service within 48 hours of purchase for a full refund, processed by AWS. After that the term runs to its end; turn off auto-renewal to stop billing.
To request a refund or raise any other billing question, email contact@infoinlet.com with your AWS account ID. We reply within one business day.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
- Amazon Bedrock AgentCore
API-Based Agents & Tools
API-Based Agents and Tools integrate through standard web protocols. Your applications can make API calls to access agent capabilities and receive responses.
Additional details
Usage instructions
API
Data Guard finds and redacts PII, PHI and secrets in text, JSON, NDJSON, YAML and CSV over HTTPS. Nothing to deploy.
-
After subscribing, choose "Set up your account", sign in or create an account at cloud.llmlinq.com, and copy your API key. It is shown once; rotate it on the same page if lost.
-
Call https://api.llmlinq.com/data-guard/v1 with the header Authorization: Bearer llq_live_... (or X-Api-Key: llq_live_...)
curl -X POST https://api.llmlinq.com/data-guard/v1/scan
-H "Authorization: Bearer llq_live_..."
-H "Content-Type: application/json"
-d '{"text": "Call Sarah on 415-555-2671"}'Endpoints: POST /scan, POST /redact, POST /restore, POST /check, GET /detectors. Send the document inline as text or base64_data. The hash and encrypt strategies need a key on the call.
Errors are JSON {"error": "code"}: 400 invalid request, 401 missing or invalid key, 403 subscription inactive, 413 result too large (split the document), 429 throttled (retry with backoff).
-
To use it as MCP tools on a Bedrock AgentCore Gateway, add a target of type REST API (not MCP server) and paste in the schema from https://api.llmlinq.com/data-guard/v1/openapi-agentcore.json
API reference: https://api.llmlinq.com/data-guard/v1/docs Support: contact@infoinlet.com
Detailed usage instructions are available at https://github.com/infoinlet-com/aws-marketplace-resources/blob/main/api/saas/data_guard.md
Support
Vendor support
Email contact@infoinlet.com . We reply within one business day, Monday to Friday.
Include your AWS account ID. For a question about a specific call, include the request_id returned in a successful response. It lets us trace the call without you sending us the data, which matters here: we do not store your documents and cannot see them.
Your API key, subscription state and account details are at https://cloud.llmlinq.com/aws/data-guard/configure
The API reference is public and needs no key: https://api.llmlinq.com/data-guard/v1/docs
Billing, cancellation and refunds run through AWS Marketplace.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.