Lucairn Privacy Gateway

Lucairn is an EU-based privacy gateway for AI APIs.

Every request through this MCP server runs through a 3-layer PII pipeline before the upstream LLM (Claude, GPT-4o, o1/o3/o4) ever sees it:

Layer 1 — known-entity matching (your tenant's named entities) Layer 2 — Presidio NER (names, emails, IBANs, addresses, phone numbers, customer IDs, …) Layer 3 — GPU-hosted custom-trained PII shield (Enterprise tier, optionally trained on your domain corpus) Detected PII is replaced with placeholders ([PERSON_1], [EMAIL_2], [IBAN_3], …) before the request reaches the upstream model. The model never receives raw personal data. Every response carries a signed Lucairn certificate (Ed25519 witness signature + RFC 3161 timestamp + Sigstore Rekor inclusion proof) that proves what was redacted, when, and by which sanitizer layer.

Tiers:

Developer (free) — 500 requests/month, no credit card. Placeholders returned verbatim (useful for testing the redaction surface). Pro — placeholders are re-linked back to the originals on the gateway before the response reaches your application; programmatic certificate JSON access; audit-event export; higher quota. Enterprise — self-host the entire stack inside your environment (no raw identity data leaves it), BYOK with provider-side billing isolation, optional custom-trained PII shield priced per scope. One MCP tool exposed: chat_via_lucairn. Sign up at https://lucairn.eu.