Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Join AI Trust Talks on October 21 and December 9 for 20-minute webinars exploring AI, identity, and data security risks →

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for SaaufAI

Listings for SaaufAI

SaaufAI is an AI model gateway: one OpenAI-compatible API (/v1/chat/completions, /v1/models) for models from OpenAI-compatible hosts, Anthropic and Google Gemini, plus a public model directory with per-model disclosures, a Playground and Wisps (AI agents).

Security and privacy highlights - API request and Playground content is not stored; only usage metadata is kept, with published retention periods (request logs: 90 days). - Data stored in the EU (Supabase, Frankfurt); hosted on Vercel. - TLS in transit; AES-256-GCM for stored credentials; scrypt password hashes; API keys stored only as SHA-256 hashes. - Scoped, rate-limited API keys and configurable safeguards with abuse detection. - Every model's provider, fallbacks and safeguard model are disclosed publicly. - GDPR-aligned Privacy Policy (English and Polish), with the full service-provider list published.

Operated by a private individual in Poland. Security reports: ai@saauf.xyz.

SaaufAI Gateway

SaaufAI Gateway is an OpenAI-compatible API (POST /v1/chat/completions, GET /v1/models) that gives one endpoint and one API key for models from OpenAI-com...

Listed Since: 2026-10-17

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
AI CAIQ
Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).