EU Privacy Gateway
By default, the Brainstorm Reactor accesses the world's most powerful base models. For handling personally identifiable information (PII) and strict regulatory requirements under GDPR and the EU AI Act, a dedicated security track exists: the EU Privacy Gateway.
Architecture
The gateway consists of two integrated security layers:
- EU Routing (Passive Shield): All models classified under EU compliance are automatically routed through a dedicated gateway service hosted within the European Union (AWS Stockholm, Sweden). Prompt context and completions never leave EU jurisdiction.
- PII Masking (Active Guard): When active, an upstream analysis layer scans input text before it reaches the language model. A specialized EU-hosted model detects personally identifiable entities and replaces them with secure, opaque placeholders:
- Names of individuals
- Email addresses and phone numbers
- Physical addresses
- Social security, tax, and registration numbers
- Payment information (credit card numbers, IBANs)
4-Slot EU Auto-Fill Guarantee
To prevent privacy leaks during multi-step workflows, agentic recipes, and swarm executions:
- When an EU or EU+PII model is selected as the primary Synthesis engine, the system automatically synchronizes all 4 execution slots (Synthesis, Logic, Research, and Background).
- This guarantees that background tasks (such as Critic audits, compression steps, and research web swarms) are strictly routed through EU-compliant models. Sub-tasks never leak to non-EU endpoints.
Visual Indicators
The system communicates gateway status via a single, prominent visual indicator:
- Large Toolbar Shield (Left): Located on the left side of the main input toolbar.
- 🟢 Emerald Green Shield: PII Guard active (EU Gateway + automatic PII redaction).
- 🔵 Blue Shield: EU Shield active (EU-only routing without PII redaction).
- Gray / Default: Standard global routing.
Model names are kept functional in the interface (e.g. EU · PII · Workhorse). Users can view the exact active model versions dynamically in the model selection dropdown at any time.
Activation Modes
- Direct Model Selector: Select an EU or EU+PII model directly from the model dropdown.
- Pseudonymization Tool: Select the PII Redaction tool from the Direct Mode menu.
- SmartInput Keywords: Typing specific privacy keywords (e.g., "GDPR", "secret", "DSGVO", "vertraulich") automatically prompts the user to enable PII protection.
- Socratic Briefing Mode: Selecting the EU-Datenschutz Briefing in Sixami or Socratic modes automatically routes all turns through the EU PII gateway (2 credits per step).
System Behavior
| State | Gateway Endpoint | Multi-Slot Synchronization | UI Signal (Toolbar) |
|---|---|---|---|
| Standard | OpenRouter (Global) | Freely selectable per slot | Standard Toolbar |
| EU Shield (passive) | Opper EU Gateway (Stockholm) | Auto-fills all slots to EU models | 🔵 Blue Shield |
| PII Guard (active) | Opper EU Gateway + PII Masking | Auto-fills all slots to EU PII models | 🟢 Emerald Shield |
Enterprise Scaling
For B2B customers in regulated industries, the EU Privacy Gateway can be permanently enforced at the tenant level (Always-On DLP). In the default configuration, it remains an opt-in tool offering granular control over privacy, latency, and model capabilities.