Skyflow alternative: a proxy you run yourself, no vault

Skyflow pricing is not published, and in all three of its deployment models Skyflow operates the service. For LLM calls it documents a plugin for Kong Gateway that replaces personal data with vault tokens and restores them in the answer.

Nonimo Gateway runs on your own servers. See plans and get in touch.

People who look for a Skyflow alternative usually want software they run entirely themselves, or something narrower than a data privacy vault: a proxy in front of the OpenAI API and nothing more. This guide sets out what Skyflow publishes and where Nonimo Gateway fits.

What Skyflow is

Skyflow describes itself as a data privacy vault for isolating, protecting and governing sensitive data. It documents an LLM round trip: reversible vault tokens restored in the answer, inside tool-call arguments, for OpenAI, Anthropic and MCP payloads. It is built around a vault with per-caller, audited re-identification across your systems.

The old /product/llm-privacy-vault address now redirects to the Skyflow for GenAI page, and the name “LLM Privacy Vault” survives in the documentation. If you searched for either name, it is the same offering.

Where Skyflow may not fit

• Skyflow runs it. The deployment documentation sets out multi-tenant SaaS, a dedicated VPC (Virtual Private Skyflow) and Bring Your Own Cloud on AWS or GCP, where “you own the infrastructure; Skyflow operates the service”. We found no fully self-run container, and no hardware requirements are published.
• Streaming is buffered. The Kong plugin page says re-identification runs on the full completion, which is then re-emitted as server-sent events. That stops a token split across chunks from leaking, but the user does not see the answer form token by token.
• It is not an OpenAI-compatible proxy you host. It needs Kong Gateway 3.15 or later, cannot share a route with ai-proxy (it uses a nested two-route pattern), and calls Skyflow’s own Detect APIs, so you need a Skyflow account too. The page does not say Kong Enterprise is required.
• No published price. skyflow.com/pricing redirects to the homepage, and neither product page shows a price, as of 20 October 2026.

If you are weighing Kong’s own options for PII, see Kong AI Gateway and PII.

Skyflow and Nonimo Gateway side by side

	Skyflow (vault plus Kong plugin)	Nonimo Gateway
What it is	Data privacy vault with an LLM plugin for Kong	Private proxy on your own servers
Who operates it	Skyflow, in SaaS, a dedicated VPC or your AWS or GCP account	You, on your own servers
What you install	Kong Gateway 3.15 or later, the plugin, and a Skyflow account	Nonimo Gateway on your own servers
How your code uses it	Requests through Kong routes alongside ai-proxy	Change base_url in your OpenAI client
Restoring real values	In the response, per caller under roles and policies, with audit	Automatic in the response
Streaming	Full completion buffered, then re-emitted	Real values back in the answer
Data stored	Tokenised values held in the vault	Counts of what was replaced, without the content
Published price	None	Plans on the Nonimo Gateway page, with your own OpenAI key

How Nonimo Gateway does it

Nonimo Gateway is for teams that call the OpenAI API with their own key and want a proxy they run themselves. It runs on your own servers and has an OpenAI-compatible API:

import os
from openai import OpenAI

client = OpenAI(
    base_url="https://gateway.your-company.internal/v1",  # your Nonimo Gateway
    api_key=os.environ["OPENAI_API_KEY"],                  # your own OpenAI key
)

It replaces personal data in what goes out and restores the real values in the response. It recognises the national documents and numbers of each country it serves: among them the Spanish DNI, NIE and NIF, Spain’s CUPS energy supply number, the German Steuer-ID, the French NIR, the Italian codice fiscale, the Brazilian CPF and the Mexican RFC and CURP. If you route calls through LiteLLM rather than Kong, there is a plugin; see LiteLLM PII guardrails.

Replacing and restoring is pseudonymisation, and it helps rather than settles the legal question. Our guides on deidentified versus anonymised and on pseudonymisation under UK GDPR explain why. If you are still building the case for any control, start with whether putting client data in ChatGPT is a data breach. For other gateways, see the Portkey alternative, Cloudflare AI Gateway and PII, or the overview of PII redaction software.

If you want a proxy that you operate, on your own server, with real values back in the answer, Nonimo Gateway is built for that. See plans and get in touch on the Gateway page.

Sources

Checked 20 October 2026.

• Skyflow, Skyflow for GenAI. The data privacy vault description and the redirect from the old LLM Privacy Vault page.
• Skyflow Docs, LLM privacy pattern. The LLM Privacy Vault name in the documentation.
• Skyflow Docs, deployment models. Multi-tenant SaaS, Virtual Private Skyflow, Bring Your Own Cloud.
• Kong, Skyflow AI Data Control plugin. Kong Gateway 3.15, routing, reversible tokens, tool calls, providers, buffered streaming.
• Skyflow, homepage. Where the pricing address redirects.

---

This page is for information. Product details of other vendors were checked on their official pages on 20 October 2026 and can change.