Strip PII from every LLM request before it leaves your infrastructure

Scrubix sits between your app and your LLM provider, redacting emails, phone numbers, credit cards, and more — with full audit logging and an OpenAI-compatible API.

User types: "my card is 4242 4242 4242 4242"
Your appScrubixLLM provider
Provider receives: "my card is [CREDIT_CARD_REDACTED]"

Everything you need to run PII redaction in production

PII scanning & redaction

Regex-based detection across 6 builtin pattern types — email, credit card, phone, SSN, and more — plus unlimited custom team-defined rules.

Audit logging

Every request and every redaction event is logged to Postgres and queryable from the dashboard.

Multi-tenant auth

JWT cookies for the dashboard, API keys for programmatic access — every query scoped to your team.

Redis caching & rate limiting

API key lookups are cached and proxy requests are rate limited with a Redis-backed token bucket. Degrades gracefully if Redis is unreachable.

Webhook alerts

Get notified whenever PII is redacted. Payloads are HMAC-signed with automatic retry and backoff.

Provider-agnostic routing

Requests routed by model prefix. Change two lines — base_url and api_key — everything else stays the same.

Drop-in for your existing SDK

Your client code changes two lines — base_url and api_key. Everything else stays identical to calling a provider directly.

  • OpenAI-compatible chat completions API
  • Streaming support (SSE passthrough)
  • Dashboard with live stats & redaction rules