Stop PII from leaking into prompts.
Lutril inspects every prompt headed to an LLM, detects PII, secrets, and keys, and redacts them before the model ever sees them, without blocking the work.
- Detect
- PII, secrets, API keys, and custom patterns.
- Redact inline
- Replace sensitive spans before the model receives them.
- Per-model policy
- Different rules for public models vs. your private endpoints.
- Immutable audit
- Every redaction recorded, nothing stored in the clear.
Draft a refund email to maria.lopez@acme.com for the charge on card 4111 1111 1111 1111, and use key sk-live_9fXa…2bQ to look up the order.
Draft a refund email to [EMAIL] for the charge on card [CARD], and use key [SECRET] to look up the order.
2026-06-23 09:41:02.118 usr_4kQ REDACT email,card,secret,name (4 entities, gpt-4o)
A checkpoint on the way to every model.
DLP runs at the same layer that governs your agents, so it applies to chat, copilots, and MCP tool calls alike.
Detection that fits your data
Built-in detectors for emails, cards, national IDs, and secrets, plus regex and keyword patterns for your own sensitive fields.
Redact, mask, or block
Choose per policy: redact the span, mask to a token the model can reason about, or block the request outright.
Works across every model
One policy covers ChatGPT, Claude, Gemini, and your self-hosted models, applied consistently everywhere.
Provable compliance
An immutable log of what was detected and redacted gives auditors evidence without exposing the original data.