// Module 01

AuditCore

Traces every AI decision.

Automatically logs all your AI API calls, flags risks and generates KVKK compliance reports. Requires no changes to your existing code.

Request a Demo

// How It Works

One line,
endless visibility.

The AuditCore SDK wraps your existing OpenAI client. Every call passes transparently through the proxy, is logged and risk-analyzed. Your business logic stays unchanged.

# Your existing code stays the same
from openai import OpenAI
from auditbase import AuditCore

audit = AuditCore(
  url="ai.yourcompany.com",
  tenant="your-id"
)

# One line — the rest is automatic
client = audit.wrap(OpenAI())

response = client.chat.completions.create(
  model="gpt-4o",
  messages=[...]
)

# ✓ Logged · Hashed · Compliant

// Features

Everything you need for
enterprise AI auditing.

Proxy Architecture

Captures your existing OpenAI/Anthropic/Google calls with a one-line SDK change. No code changes required.

Immutable Audit Log

Tamper-proof records signed with SHA-256. Ready to present as evidence to auditors.

PII Masking

Automatic detection and masking of national ID numbers, phone numbers and emails. Compliant with KVKK Article 4.

11 Risk Rules

Hallucination detection, sensitive data leakage, prompt injection and model-specific risk rules.

Turkish Reports

Weekly/monthly Turkish compliance reports. Board-ready PDFs.

10K Events/Sec

Built for high-volume enterprise traffic. Latency overhead < 5ms.

Multi-Provider

OpenAI, Anthropic, Google Gemini, Azure OpenAI and Mistral through a single integration.

BDDK Compliance

Risk categories and reporting templates tailored to the banking sector.

On-Premise

Your data never leaves your servers. Set up in 1 day with Docker Compose.

Webhook & API

Webhook support to forward risk events to your own systems in real time.

SSO Integration

LDAP/Active Directory and SAML 2.0 support. Enterprise identity management.

ISO 42001 Ready

Automatically generates the audit evidence package. Speeds up the certification process.

// Use Cases

Example scenarios by sector.

Banking

Credit scoring AI system

The BDDK (Turkey's banking regulator) wants the rationale behind the model's decisions. Every prompt and response is recorded in the audit trail, and the rationale is generated automatically.

✓ Audit explanation time reduced by 80%.
Healthcare

Patient communication chatbot

Is patient data (national ID, diagnosis) passing to the AI? Automatic PII masking kicks in on every call, so no sensitive data reaches the model.

✓ KVKK compliance risk eliminated.
Retail

Customer service AI

50K+ calls a week, impossible for the compliance team to check. AuditCore emails risk-scored summaries every Monday.

✓ Compliance review time cut to 2 hours a week.

// Frequently Asked Questions

What you might be wondering.

Does AuditCore require me to change my existing code?

No. AuditCore uses a proxy architecture; it wraps your existing OpenAI or Anthropic client with a one-line change. No changes to your business logic are needed.

Which AI providers does AuditCore support?

OpenAI, Anthropic, Google Gemini, Azure OpenAI and Mistral are supported. With a single integration, calls to all providers are logged centrally.

Does AuditCore send my data to the cloud?

No. AuditCore is deployed entirely on-premise. All logs, risk analyses and reports are processed and stored in your own Docker environment. No data leaves your infrastructure.

How does PII masking work?

AuditCore automatically detects and masks personal data such as national ID numbers, phone numbers, emails and IBANs in the text sent to and received from the AI. It is compliant with KVKK Article 4.

How often are KVKK compliance reports generated?

Weekly and monthly Turkish compliance reports are generated automatically. They come as PDFs ready to present to the board or a BDDK audit.

Pilot · First 5 Customers

50% off setup,
first 3 months free.

For the first 5 companies in the reference customer program. In return, we only ask for a reference letter.

info@auditbase.ai