Loading the SOTA2 catalog…
Consus Gateway
AI gateway for US defense contractors that routes production traffic to secure and compliant AI models via an OpenAI Chat Completions-compatible API, keeping every request insid...
What is Consus Gateway?
AI gateway for US defense contractors that routes production traffic to secure and compliant AI models via an OpenAI Chat Completions-compatible API, keeping every request inside a US-only boundary with immutable audit logs and zero data retention.
Product typeModel APIs & Gateways
Pricing · Usage Based
Deployment
APIAvailable
What teams use Consus Gateway for
Routing production AI traffic to compliant models
Keeping AI requests inside a US-only boundary
Providing compliance evidence for defense programs
Integrations and access
Platforms, integrations, and language support vary by plan and region. Confirm final requirements with the vendor.
Platforms
IntegrationsAPI and webhooks
Languages
Support
What reviewers say
Community reviewsReviews are owned and editable by their authors.
Sign in to reviewLoading community reviews…
Enterprise readiness
Compliance claims are normalized from current vendor documentation and independently reviewed by SOTA2.
FedRAMP
ITAR Compliant
SOC 2 Type I
SOC 2 Type II
CMMC Level 2
DFARS 252.204-7012(b)(2)(ii)(D)
NIST SP 800-171
FIPS 140-2
22 CFR 120.54(a)(5)
DoD CC SRG IL5
NIST SP 800-53
US persons only in data plane
US-only cloud regions
No cross-border replication
Zero persistence of prompts or completions
FIPS 140 validated end-to-end encryption
TLS 1.2+ in transit
AES-256 at rest
Customer-managed keys per cloud boundary
No shared key material across boundaries
Federated cloud access with ephemeral short-lived credentials
Static-key creation blocked by organization policy
No long-lived service account keys
API key authentication with per-key scoping
Policy headers enforce program, classification, and contract pinning per request
Gateway-side key rotation
Every request logged with model, provider, timestamp, token counts, and routing decision
Prompts and completions not logged
Logs encrypted under customer-managed key
Log retention 365 days
Continuous vulnerability monitoring
Detection and containment at gateway layer
Customer notification within 24 hours of confirmed incident
DoD CIO notification within 72 hours via dibnet.dod.mil per DFARS 252.204-7012
Stateless pass-through with no request or response content cached, stored, or made available to other users
Data retention:
Benchmarks and comparisons
Independent benchmarksStructured task results are being verified.
Side-by-side comparisonsComparison workspaces will be available in a later release.
