- • Raw request enters DDS Protect
- • PII spans detected & redacted
- • Redaction event logged to SQLite
- • Sanitized request forwarded to LLM
- • PII never leaves your infrastructure
- • Detection model runs locally
- • Audit trail is append-only
- • No telemetry, no phone-home
- • Single Docker container
- • One env var change to integrate
- • CPU or GPU (CUDA/MPS)
- • 8GB RAM, ~5GB disk