This is in development. Details may change before it is available.
What Altrum records
For every request and every MCP tool call:- when it happened, the key, the AI system and the person behind a personal key,
- the provider, the model, and any fallback used,
- the tokens and the cost,
- how long it took,
- the outcome, one of the words in the table below,
- which guardrails checked it and what they found: the guardrail, the direction, the action, and the kind of thing found. Never the matched text.
Outcomes
Content is off by default
Altrum does not keep what was sent or answered unless your organization chooses to.- An owner or admin switches content logging on in the AI Gateway settings, for the organization’s keys. Each AI system can choose differently on its AI Gateway tab, or follow the organization.
- Kept content is the content after masking: text a guardrail masked is never stored.
- The request record itself never holds the content. It stays apart, under your organization only, and a record says whether content was kept for it.
- Content is kept for 30 days by default. You can set any number of days from 1 to 365. When the time is up the content is deleted and the record says none is kept.
- Only owners and admins can read stored content. Each read gives a link that stops working after two minutes, and every read is written to your organization’s audit log.