AI Governance

Protect your Agents from themselves

Apply PII, secrets, model, and spend policies through the Sansa gateway with a clear audit trail for every call.

POLICY ENGINE

One policy layer for AI

Define model, data, safety, and spend rules once. Attach them by ID to any request and audit exactly what ran.

Keep AI in bounds.

Set model access, PHI and PII handling, spend limits, and safety checks in one versioned policy.

Policies

Healthcare Assistant

pol_9f3a

Customer Support

pol_2c81

5

Internal Tools

pol_7b12

12

Marketing Copy

pol_4e90

4

Healthcare Assistant

pol_9f3aActivev3 · Updated Feb 12

Rules

Data

PII

Applies to input + output

Block

PHI

HIPAA · enforced at gateway

Block

Access

Models

Claude family models via gateway

Anthropic only

Limits

Max tokens

Per request, input + output

80,000tokens

Rate limit

Per API key

1 / 2s

Safety

Prompt injection

Pre-call scan on user messages

Block

Post-call eval

Runs after response

groundedness

Locale

Prompt language

Reject non-English input

English only

Update policy in one place.

Edit a policy once. Every app using that policy ID follows the current rules on the next request.

Chat Completions

1
2
3
4
5
6
7
8
9
{
"model": "claude-4.6-sonnet",
"messages": [
{ "role": "user", "content": "Summarize this visit note." }
],
"sansa": {
"policy": "pol_9f3a"
}
}

Policy resolved

pol_9f3a → Healthcare Assistant

ModelsAnthropic only
PIIRedact
PHIBlock
InjectionBlock
Evalgroundedness

Always audit-ready.

Track which policy version governed each request across teams, apps, and model providers.

Policies

Search policies
All environments
NamePolicy IDVersionRulesEnvironmentStatus
Healthcare Assistantpol_9f3av37Production
Active
Customer Supportpol_2c81v25Production
Active
Internal Toolspol_7b12v14Production
Active
Marketing Copypol_4e90v13Staging
Draft
Legal Reviewpol_1d55v46Production
Active
Onboarding Botpol_8a03v24Staging
Active

The right policy, automatically.

Your coding agent can read policy IDs through MCP and add the right one while it writes the request.

Cursor

MCP

What policy do we apply to this call?

I'll run the sansa MCP to check the policy for this project and call.

Ran get_policy in sansa-mcp

Use Healthcare Assistant (pol_9f3a). Anthropic-only, PHI blocked, PII redacted, injection blocked, and groundedness eval runs after each call.

visit-summary.ts
1
2
3
4
5
await client.chat.completions.create({
model: "claude-4.6-sonnet",
messages: [{ role: "user", content: prompt }],
sansa: { policy: "pol_9f3a" },
});

Your all-in-one
AI backend.