Policy before inference. Evidence after.
Set organisation-scoped routing, optional budgets, and review what was used and what changed. The same rules apply to every request, whichever consumer sent it.
D×E routing policy
Declare request sensitivity (D-class), assign provider environment classes (E-class), and use the routing matrix to block incompatible requests before inference. API keys enforce sensitivity defaults and floors.
Explore data routing →Budgets
Optionally cap spend per member or dedicated API key and per provider. Without a cap, no optional budget ceiling applies; routing and technical limits still apply. Steinkauz AI does not include inference credit.
Explore Budgets →Usage and audit visibility
Inspect inference activity across every consumer, review configuration audit events for policy and provider changes, and trace administrative actions.
Explore audit visibility →Routing
Data routing policy
Choose which environments may process each declared sensitivity level. Incompatible API requests are blocked before inference.
Interactive demo. No data is saved.
API sensitivity
The key default is used without a request declaration. The declaration must meet the key floor; this demo fixes the floor at D0. Classify the entire request, including any transient file input, in your application.
Used when the request has no sensitivity header.
Sent using X-Steinkauz-Data-Sensitivity; applies to the entire request.
Provider
Each provider has a provider environment class (E-class). Pick one to simulate a request.
Simulate a request
Compare using the key default with an explicit request declaration.
Effective sensitivity: D0: Public
D×E routing matrix
Configure which provider environment classes may handle each data sensitivity level. Toggle cells to allow or block combinations.
| Data sensitivity | E0E0: Unclassified | E1E1: Public managed | E2E2: Enterprise managed | E3E3: Private cloud | E4E4: Customer hosted | E5E5: On premise |
|---|---|---|---|---|---|---|
| D0D0: Public | ||||||
| D1D1: Internal | ||||||
| D2D2: Confidential | ||||||
| D3D3: Restricted | ||||||
| D4D4: Critical |
API keys also enforce a minimum data class and execution environment. A declaration cannot go below the key floor. Labels are customer assertions; the Platform does not classify file contents.
Budgets
Optional ceilings, not included credit
Cap cost and/or tokens per member or dedicated API key, per provider. Empty fields add no optional cap; other limits still apply. Remaining 0 blocks further requests on that provider.
- Caps are optional and per member or dedicated API key × provider, not a single global limit, and not included inference
- Cost and token ceilings can be set independently; skip a field and that track stays uncapped
- Inherit keys follow the creator’s member budget; dedicated keys have their own ceilings
- Existing tools, custom software, through the API all share the same rules. Caps apply to the active billing period
Cap cost and/or tokens per member or dedicated API key, per provider. Empty fields add no optional cap; other limits still apply. Remaining 0 blocks further requests on that provider.
Anthropic
Maya Chen
Member
Tom Weber
Member
Uncapped
billing-bot
Dedicated API key
Azure OpenAI
Maya Chen
Member
Uncapped
Uncapped
Preview only. Owners and admins configure live budgets in the app under Budgets. Caps apply to the active billing period.
Audit
Audit built in
Two complementary surfaces: AI inference activity and configuration changes.
AI inference activity
- Request detail: read-only input/output log, request metadata, routing decision, usage and safe file evidence
- Dedicated activity page for searchable requests across API with API-key attribution
- Model-call timing and cost, plus JSON evidence downloads subject to content retention and role permissions
- Unified usage and cost visibility for reconciliation and review
Governed API requests have searchable policy, attribution and usage evidence.
pde_8f2a…c91dOpen Activity to inspect inputs, outputs, request metadata, the policy decision and usage in one detail, subject to retention and role permissions.
Search and filter requests by model, member, API key, connection, decision and processing status. Inspect inputs, outputs, timing, cost and policy evidence with the appropriate permissions.
Every meaningful policy or provider change leaves a trace for review.
Routing matrix changed: D3: Restricted → E1: Public managed, allowed → blocked.
API key created with default sensitivity D2: Confidential and minimum sensitivity D1: Internal.
Optional cost cap set for Alex on Azure OpenAI.
Azure OpenAI provider environment class updated to E3: Private cloud.
Routing, connection, budget, API access and membership changes are available in Change history.
Configuration audit
- Routing matrix changes with field-level before/after comparison
- Budget audit for cap edits on members and API keys
- Provider audit for creation, updates, deletion, and environment-class changes
- Administrative audit for membership and billing-sensitive organization changes
Govern AI without losing agility
Set policy once. Apply it to the tools you already run, the software you build, through the API.