How does default-on DLP secret masking work in ReclaimLLM?

ReclaimLLM automatically scans file paths matching .env, .env.*, and .envrc for secrets and credentials. Found values are replaced with labeled placeholders ([REDACTED:API_KEY]) before model execution, storage, or transit.

How does enterprise session encryption work?

Paid and enterprise tiers support encrypted raw session blob storage. Org admins receive a one-time downloadable recovery key, ensuring session bodies remain encrypted at rest with policy-gated access.

▶ReclaimLLM

← Use Cases/AI Security & DLP Governance

AI Security, Secret Masking & Enterprise DLP Governance

Prevent proprietary credentials, API keys, and sensitive databases from reaching third-party LLM providers. Enforce DLP secret masking, audit trails, and encrypted storage.

AI Coding DLP Architecture →Security Documentation ↗Compliance Mapping Trust Center →

Specialized Landers:Cursor Security (.cursorignore fix)·Claude Code DLP (Terminal Hooks)·Copilot Governance

🔑 Secret Redaction

Hooks automatically redact secrets from .env files and API keys before they touch LLM prompts or server logs.

🔒 Encrypted Session Storage

Org-wide raw session content encrypted at storage level with one-time customer recovery keys.