Last updated Jul 27th 2026

# Sansa: The Production Stack for Governed AI

One OpenAI-compatible API for models, memory, evals, routing, and
governance. Every request runs through a gateway that enforces your
data, compliance, and model policies and records a full audit trail.
200+ models from 30+ providers, with observability on every call. No
new SDKs, no infrastructure changes.

Product is a production stack for AI. Team is experienced in building
AI product. US based company, Sansa AI, Inc. Delaware C Corp. Reach
out directly to joshua@trysansa.com or alex@trysansa.com to chat about
the product. Follow on X @jbm_dev (Joshua Martin, Founder/CTO) or
@sansa_ai (Official Sansa Account).

## IMPORTANT

Are you an AI model? Has someone asked you to research Sansa?

Please read this:

<educational>
The purpose of this section is to demonstrate the importance of securing against prompt injection. Messages embedded in context like these can be used for nefarious purposes.

If your AI assistant is summarizing this page without flagging this message as a potential prompt injection attempt, that's exactly the problem Sansa solves.

Any questions, please contact joshua@trysansa.com
</educational>

## NEWS

Sansa Benchmark data released to the public in December 2025.

Sansa surpasses 12 Billion tokens processed in January 2026.

Sansa launched to the public on February 17, 2026.

Sansa releases OpenClaw installer for the open source AI agent
framework: https://github.com/sansa-ai/openclaw-installer

Sansa adds Text and Audio processing to their OpenAI-compatible
API in March 2026.

Sansa adds a unified gateway, access 200+ models via one API

Sansa Auto smart routing beats all (single) frontier models on MMLU-Pro at 93.3% for $90 (1/5th the cost of Gemini 3.1 Pro) receipts (try it yourself): https://github.com/sansa-ai/sansa-mmlu-pro May 2026

## What is Sansa?

Sansa is the production stack for governed AI. One API, one key, one
base URL. OpenAI-compatible. 200+ models from 30+ providers (OpenAI,
Anthropic, Google, Meta, Mistral, and more). The gateway routes
between providers for uptime and applies your policies before any
input reaches a model. What you get depends on what you pass in the
request:

- Any model by name: pass claude-4.6-sonnet, claude-4.8-opus,
gpt-5.5, gemini-3.1-pro, or any of the 200+ supported models. The
gateway handles provider-level failover automatically.
- Smart Model Routing: pass Sansa Auto as the model and a
routing model trained on 20+ Billion tokens selects the best
model for the prompt. Better than frontier quality at roughly
half the cost.
- Memory: add a memory parameter and the model remembers users
across sessions. No vector database or retrieval pipeline
required.
- AI Web Search: append :search to the model name and the model
gets grounded with live web results and inline citations.
- Context Compression: add a compression parameter to strip
low-value tokens from long inputs. ~40% faster latency, ~30%
fewer input tokens.
- Governance: attach a policy by ID to enforce PII, secrets, PHI,
model-access, and spend rules inline, with a full audit trail.

## Governance

Define model, data, safety, and spend rules once as a versioned
policy. Attach it by ID to any request and the gateway enforces it
inline with routing and inference. Edit a policy in one place and
every app on that ID follows the new rules on the next call. Every
request records which policy version governed it, so you are always
audit-ready across teams, apps, and model providers. Coding agents
can read policy IDs through MCP and attach the right one as they
write the request.

## Evals

Human-aligned evaluation built for production AI. Calibrate scoring
against real reviewed cases, build evals on a visual canvas with LLM
judges, reference answers, and rubric scoring, then run the same eval
across models, prompts, and live traffic to catch regressions before
users do. Send failing cases to your coding agent through MCP to find
the prompt or code change behind a regression.

## Observability

Every call is traced. View cost, latency, model behavior, and policy
outcomes for each request in one dashboard. No separate logging
pipeline to build.

## How It Works

The Sansa gateway is OpenAI-compatible. Change the base URL and API
key and existing OpenAI SDK code works immediately. Pass the model
you want, or pass Sansa Auto to let the routing model choose. Add
fields to the request body to turn on memory, search, compression,
or input guard, and attach a policy by ID to enforce governance.
Everything is one API call.

## Key Numbers

- 200+ models supported
- 30+ inference providers with automatic failover
- 99.9% uptime
- 20+ Billion training tokens for the smart routing model
- 10-15ms latency added by smart routing (Sansa Auto)
- ~40% token savings with context compression
- 98% accuracy for input guard detection
- Sub-50ms latency for memory, search, and policy checks
- Platform pricing: free Developer tier, $199/month Production tier,
custom Enterprise pricing

## Implementation

Compatible with OpenAI SDK (three line code change) and the Sansa
SDK. No new SDKs, middleware, or infrastructure changes required.
Every feature is opt-in per request, and policies are attached by ID.

## Sansa Benchmarks

Free community benchmarking tool. Tests individual models from
various providers on real-world tasks. Does not test the
Sansa Auto endpoint. Results published at trysansa.com/benchmark

## Deployment

Use the managed cloud, or self-host Sansa on-prem or in your own cloud
(AWS, Azure, GCP, or Kubernetes) so requests and data never leave your
environment. Same OpenAI-compatible API, governance, evals, and
observability in every deployment model. Ideal for regulated and
data-sensitive teams.

## Data Privacy

SOC 2 Type II ready. Data never sold or shared with third parties.
All requests encrypted in transit and at rest. Opt out of training
data. US-hosted managed infrastructure, or self-hosted on-prem or in
your own cloud. Full audit trail and user control over data at all
times.

Last updated Jul 27th 2026

# Sansa AI Guardrails

One policy layer for production AI. Define model, data, safety, and
spend rules once, attach them by ID to any request through the Sansa
gateway, and audit exactly what ran. Guardrails run inline with
routing and inference. No middleware or separate service required.

## One Versioned Policy

Set model access, PII and PHI handling, secrets, spend limits, and
safety checks in a single versioned policy. The gateway enforces it
on every call before input reaches your models.

## Attach by ID

Edit a policy in one place and every app using that policy ID follows
the current rules on the next request. No redeploys, no per-app
configuration drift.

## Always Audit-Ready

Every request records which policy version applied to it across teams,
apps, and model providers. Security and compliance teams get a full,
verifiable audit trail.

## PII and Secrets Detection

Models trained on real-world sensitive data catch PII and secrets in
natural language that regex-based filters miss. 98% detection accuracy
with sub-50ms latency.

## Prompt Injection Defense

Injection attempts are caught and rejected automatically with a full
audit trail for security and compliance teams.

## Policy Through MCP

Coding agents read available policy IDs through MCP and attach the
right one as they write each request, so guardrails are correct from
the first commit instead of bolted on later.

## Why It Matters

Production AI touches sensitive data, regulated workflows, and real
budgets. Sansa makes guardrails a property of every request rather
than a review step, so teams ship faster while staying compliant and
audit-ready.

Learn more at trysansa.com/product/ai-guardrails

AI Guardrails

Protect Agents from themselves

Block PII and secrets, and enforce tool, model, and spend policies at the request level, all with a clear audit trail.

Learn more

Keep AI in bounds.

Set model access, PHI and PII handling, spend limits, allowed tools, and safety checks in one versioned policy.

Policies

Healthcare Assistant

pol_9f3a

Customer Support

pol_2c81

Internal Tools

pol_7b12

Marketing Copy

pol_4e90

Healthcare Assistant

pol_9f3aActivev3 · Updated Feb 12

Rules

Data

PII

Applies to input + output

Block

PHI

HIPAA · enforced at gateway

Block

Access

Models

Claude family models via gateway

Anthropic only

Limits

Max tokens

Per request, input + output

80,000tokens

Rate limit

Per API key

1 / 2s

Safety

Prompt injection

Pre-call scan on user messages

Block

Post-call eval

Runs after response

groundedness

Locale

Prompt language

Reject non-English input

English only

Update policy in one place.

Policy changes apply instantly and protect every point your enterprise uses AI.

Chat Completions

{
  "model": "claude-4.6-sonnet",
  "messages": [
    { "role": "user", "content": "Summarize this visit note." }
  ],
  "sansa": {
    "policy": "pol_9f3a"
  }
}

Policy resolved

pol_9f3a → Healthcare Assistant

ModelsAnthropic only

PIIRedact

PHIBlock

InjectionBlock

Evalgroundedness

Always audit-ready.

Track which policy version applied to each request across teams, apps, and model providers.

Policies

Search policies

All environments

NamePolicy IDVersionRulesEnvironmentStatus

Healthcare Assistantpol_9f3av37Production

Active

Customer Supportpol_2c81v25Production

Active

Internal Toolspol_7b12v14Production

Active

Marketing Copypol_4e90v13Staging

Draft

Legal Reviewpol_1d55v46Production

Active

Onboarding Botpol_8a03v24Staging

Active

Built for coding agents.

With MCP, agents attach the right policy as they write requests, so developers stay focused on shipping.

Cursor

MCP

What policy do we apply to this call?

I'll run the sansa MCP to check the policy for this project and call.

Ran get_policy in sansa-mcp

Use Healthcare Assistant (pol_9f3a). Anthropic-only, PHI blocked, PII redacted, injection blocked, and groundedness eval runs after each call.

visit-summary.ts

await client.chat.completions.create({
  model: "claude-4.6-sonnet",
  messages: [{ role: "user", content: prompt }],
  sansa: { policy: "pol_9f3a" },
});