Zotniq SDK

Runtime data-loss prevention for AI applications. Detect, mask, and block sensitive data before it leaves your process — locally by default, cloud-augmented on request.

pip install zotniq

Quick start

from zotniq import Zotniq

# Local-only, no key required, zero network calls
client = Zotniq()
findings = client.detect("Contact bob@example.com")

# Cloud-augmented (server-side LLM contextual pass)
client = Zotniq(api_key="zot_sk_...")
result = client.preflight.check(
    text="my ssn is 123-45-6789",
    destination="AI_TOOL",
)
print(result.decision)      # Decision.ALLOWED_WITH_MASKING
print(result.masked_text)   # my ssn is XXX-XX-6789

Install with extras

pip install zotniq[openai]   # OpenAI drop-in wrapper
pip install zotniq[siem]     # SIEM forwarders (Splunk, Datadog, webhook, file)
pip install zotniq[all]      # everything

Modes

• mode="auto" (default) — cloud if api_key is set, local otherwise
• mode="local" — always local, no network calls
• mode="cloud" — always cloud, raises AuthError if no key

OpenAI drop-in

from zotniq import Zotniq
from zotniq.integrations.openai import wrap_openai

client = wrap_openai(Zotniq(api_key="zot_sk_..."), api_key="sk-...")
response = client.chat.completions.create(
    model="gpt-4",
    messages=[{"role": "user", "content": "my ssn is 123-45-6789"}],
)
# SSN is automatically masked before OpenAI ever sees the prompt.

SIEM forwarding

from zotniq import Zotniq
from zotniq.siem import SplunkForwarder

client = Zotniq(
    api_key="zot_sk_...",
    on_decision=SplunkForwarder(
        url="https://splunk.acme.com:8088/services/collector",
        token="hec-token",
    ),
)
# Every preflight.check() call fires an async POST to your SIEM.
# Decision metadata only — never raw payload content.

Full documentation at docs.zotniq.ai/sdk.

License

Apache-2.0.