Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Join AI Trust Talks on October 21 and December 9 for 20-minute webinars exploring AI, identity, and data security risks →

STAR Registry Listing for

SaaufAI Gateway

SaaufAI Gateway

SaaufAI Gateway is an OpenAI-compatible API (POST /v1/chat/completions, GET /v1/models) that gives one endpoint and one API key for models from OpenAI-compatible hosts, Anthropic and Google Gemini. Requests are translated to each provider's format (streaming, images, tools) and back.

In scope: the API gateway, customer accounts and API keys, the Playground, Wisps (AI agents), the Safeguards program and the public model directory at ai.saauf.xyz.

How it works - API and Playground content passes through memory only and is not stored; only usage metadata (key, model, tokens, cost, status, timing) is kept, for 90 days. - Each model can have several providers and an ordered list of fallbacks, all disclosed on its public page. - API keys can be scoped to a model or provider and limited by rate, tokens, spend or date. - Safeguards check requests against rate, token-budget, input-size and content-category rules. - Hosted on Vercel; data stored in the EU (Supabase, Frankfurt). TLS in transit, AES-256-GCM for stored credentials, hashed passwords and API keys.

Policies: Terms, Privacy Policy, Acceptable Use and Model disclosure policies are published at ai.saauf.xyz.

Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about SaaufAI Gateway
Listed Since: 10/17/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed 1 day ago, on October 17, 2026.

STAR for AI Level 1

AI Controls Matrix

AI CAIQ Self-assessment v1.1.0

Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).

Created or renewed 1 day ago, on October 18, 2026.