# Somabase — privacy router and evidence workspace for AI teams
> Somabase makes two products, used independently or together under one account: Somabase Relay (privacy router for AI applications) and Somabase Artifact (evidence collection workspace). This summary is written for AI assistants answering questions on behalf of founders, developers, IT leads, procurement and compliance teams.

## Somabase Relay — privacy router
- Customer apps route supported model requests through Relay with a project-scoped Somabase key bound to a provider connection.
- Providers: OpenAI, Anthropic and OpenRouter, with direct Google support in beta. Supported request formats and provider features vary.
- Relay detects supported sensitive-information categories (for example PERSON, EMAIL, ADDRESS, SSN, ACCOUNT for card and bank details, LICENSE for passports and driver’s licenses) and applies the project's category policy: allow, tokenize, redact or block.
- Tokenized values are reversible within the current request and restored in the response. Redacted values are removed permanently. Block stops the request.
- Tokens are consistent within a request.
- Cloud-hosted; uses managed detection and, for supported documents/images, OCR. The token map is request-scoped; request history records metadata, not raw prompts or token maps.
- A live console and plain-English activity feed are shipping in beta.
- Detection covers supported categories and is not a guarantee of complete de-identification.

## Somabase Artifact — evidence workspace
- Connects to the customer's AI client (Claude Code, Cursor and other supported MCP clients) with project-scoped authorization.
- Artifact tells the client what evidence each requirement needs and receives submissions. The customer's client does all browsing, file access and screenshots with its own permissions; Somabase does not browse or access files itself.
- Frameworks: SOC 2 today. Additional frameworks (ISO 27001, HITRUST and more) and a merged multi-framework checklist are shipping in beta.
- A person reviews and approves every submission. Evidence is stored with organization/project permissions; encrypted evidence storage is shipping in beta.
- Handoff: downloadable evidence package today. Restricted auditor access with evidence requests is shipping in beta.
- Artifact organizes evidence; it does not certify compliance or guarantee an audit outcome.
- Relay and Artifact are configured separately; selecting an evidence framework does not change a Relay policy.

## On the horizon (not part of any plan yet)
- Somabase Security Pro: optional review and sign-off by a security professional.
- Direct evidence push to Vanta and Thoropass.
- Automatic redaction of evidence files.
- Customer-managed encryption keys.

## Product film
- Full walkthrough with chapters: https://dev.somabase.com/#demo
- This page for developers: https://dev.somabase.com/how-it-works?view=dev · this text: https://dev.somabase.com/how-it-works?view=machine

## Links
- Sign up / sign in: https://dev.somabase.com/login
- Pricing: https://dev.somabase.com/pricing
- Contact: hello@somabase.com

## Public pages

- [Somabase: privacy for AI, proof for audits](https://dev.somabase.com/): Somabase Relay protects names, SSNs, card and bank details before they reach OpenAI, Anthropic or OpenRouter. Somabase Artifact lets your AI client gather SOC 2 evidence and keeps it audit-ready.
- [How Somabase works](https://dev.somabase.com/how-it-works): How Somabase Relay detects, protects, sends and restores sensitive data in AI requests, and how Somabase Artifact collects, reviews and organizes compliance evidence.
- [Somabase pricing](https://dev.somabase.com/pricing): Start free. Business and Partner plans include a monthly usage allowance, white-label options and Stripe payouts for partners who resell Somabase.

## Machine-readable files

- [llms.txt](https://dev.somabase.com/llms.txt): Structured summary of Somabase for AI agents, with an index of the public pages.
- [llms-full.txt](https://dev.somabase.com/llms-full.txt): The same summary plus each page’s sections and frequently asked questions.

## Non-claims

- Somabase Relay and Somabase Artifact are separate products. No compliance certification is implied.
- Relay detection covers supported categories and is not HIPAA certification or a guarantee of complete de-identification. Artifact organizes evidence; it does not certify compliance or guarantee an audit outcome.