Compliance
September 12, 2026
TokenHawk sees your AI agents' traffic go by; here, precisely, is what it does and doesn't do with it.
Audit trail
Every block — IP whitelist, model whitelist, kill switch, rate limit, guardrail — is logged with its type, category and a timestamp, never with the detected data itself.
Queryable per key or tenant-wide, ready for a compliance review or an EU AI Act / ISO 42001 audit.
Hosting and data location
Our infrastructure — application servers, database, caches — is hosted in the European Union, on Amazon Web Services. Your account data and usage logs don't leave the EU as a result of our hosting.
How your content is handled
The content of your requests is not stored in our databases — only usage metadata is (timestamp, model, token count). It is never used to train a model, nor shared with a third party for commercial purposes.
Shared responsibilities
- For your account data and dashboard usage, TokenHawk is the data controller.
- For the traffic you route through the proxy, you remain responsible for any personal data your requests may contain; TokenHawk acts as a processor, following your key's own settings.
The full legal detail — retention periods, recipients, transfers outside the EU — is published in our privacy policy.