Secure your data at origin
Protect data across borders
Protect data between AI systems
Keep your sensitive data fully isolated and usable by cross-border and AI applications
Tuned AI detects and generalizes, tokenizes, hashes, and masks sensitive data, and then uncloaks data on demand
Maintain secure digital twins that fully isolate PII, PHI, and PCI data, governed by identity context from identity servers and authorization tokens
Codelessly redact and reinsert sensitive data for web services, MCP, and CLI, or call with a REST API or as an MCP Tool
Data residency and data protection trusted by top multinationals and approved by the most rigorous regulators



Data Residency-as-as-Service to expand your apps globally
InCountry for Apps is a comprehensive set of services to integrate data residency into an existing SaaS or internal app. The InCountry web services proxy automatically redacts and reinserts personal information from existing web services with no modifications. InCountry’s other app services include a REST API and mail proxy to fully isolate data within a country.

Get your data AI ready
Protect data between AI clients and servers at runtime with data minimization that maintains usability. Ensure Sovereign AI by isolating sensitive local data from global AI systems.

Expand your identity system to multiple countries
InCountry’s secure digital twins fully isolate identity profiles in their country of origin. Avoid the cost and burden of cross-border data transfers.

Comprehensive data residency for Salesforce
Operate a unified global Salesforce platform with customer digital twins fully isolated in countries mandating data residency. Manage operations globally using cloaked data, while enabling local staff and customers to seamlessly access uncloaked data.

Data residency in China
Extend your Salesforce, ServiceNow, and internal applications with subsidiaries and partners in China. Maintain a global view using cloaked data, while InCountry keeps sensitive data uncloaked in China to meet compliance requirements such as PIPL and MLPS.

Securely built for global compliance
InCountry’s secure digital twins isolate sensitive data in countries worldwide using proxy services and APIs with auditable logging and provenance. Robust data cloaking features include masking, tokenization, and hashing.
The turnkey, enterprise-grade solution for data residency
- Two points-of-presence in each country with active-active failover
- SaaS, single-tenant anywhere, AWS Outposts, and sovereign cloud options
- Guaranteed messaging across unpredictable networks
- Use from Claude Code, OpenCode, and OpenAI Codex
- Flexible tokenization, hashing, masking, and AI generalization algorithms
- Invoke via MCP Tool, MCP Proxy, Web Service Proxy, REST API, or Command Line Interface
- Granular policy-based authorization combined with fine-grained authorization from source apps
- Secure SDLC and operations with active threat monitoring
- Searchable encryption using NIST standards
- Data leak prevention across borders and data minimization within borders
- Detailed support for regulatory approval in complex jurisdictions
- Full observability with detailed logging and OpenTelemetry support