Consus
AI gateway for US defense programs, routing production traffic to compliant AI models within a US-only boundary.
About Consus
Consus is an API that routes all AI requests to secure and compliant infrastructure. Aerospace and defense companies use the API to access the latest models without worrying about paperwork or infrastructure engineering. Consus manages the compliance and backend work so you can plug AI into an application and get to work.
Products
AI gateway for US defense contractors that routes production traffic to secure and compliant AI models via an OpenAI Chat Completions-compatible API, keeping every request insid...
Security and compliance
As reported by Consus. Ask for audit reports before you buy.
- FedRAMPCompliant
- ITAR CompliantCompliant
- SOC 2 Type IIn progress
- SOC 2 Type IIIn progress
- CMMC Level 2Compliant
- DFARS 252.204-7012(b)(2)(ii)(D)In progress
- NIST SP 800-171Compliant
- FIPS 140-2Compliant
- 22 CFR 120.54(a)(5)Compliant
- DoD CC SRG IL5Compliant
- NIST SP 800-53Compliant
- US persons only in data plane
- US-only cloud regions
- No cross-border replication
- Zero persistence of prompts or completions
- FIPS 140 validated end-to-end encryption
- TLS 1.2+ in transit
- AES-256 at rest
- Customer-managed keys per cloud boundary
- No shared key material across boundaries
- Federated cloud access with ephemeral short-lived credentials
- Static-key creation blocked by organization policy
- No long-lived service account keys
- API key authentication with per-key scoping
- Policy headers enforce program, classification, and contract pinning per request
- Gateway-side key rotation
- Every request logged with model, provider, timestamp, token counts, and routing decision
- Prompts and completions not logged
- Logs encrypted under customer-managed key
- Log retention 365 days
- Continuous vulnerability monitoring
- Detection and containment at gateway layer
- Customer notification within 24 hours of confirmed incident
- DoD CIO notification within 72 hours via dibnet.dod.mil per DFARS 252.204-7012
- Stateless pass-through with no request or response content cached, stored, or made available to other users
Is this your company?
Claim the profile to keep facts current, answer buyers and submit evidence for the next ranking review.
Claim Consus