Mertcan Sağlam

built this with two co-founders in Istanbul. the short version: you point your app at us instead of OpenAI/Anthropic/Gemini directly, we strip customer data, API keys, and other stuff that shouldn't leave the building out of the prompt, then forward it to whatever model you're using. under 100ms added latency. also gives you an audit trail if anyone ever asks "prove this was handled properly" (KVKK, GDPR, EU AI Act all want that answer eventually).

started building it after watching teams, including ourselves, paste real customer data into prompts without a second thought. figured there should be something sitting in between that catches it automatically instead of relying on everyone remembering not to.

we're mid build right now, MCP traffic support just landed alongside the LLM gateway. would love feedback from anyone dealing with this problem, or just tell me I'm wrong about something, that's useful too.

I'm one of three co-founders at SHIM. we build a gateway that sits between your app and whatever LLM you're calling, scrubs PII and secrets out of prompts before they leave, and keeps an audit trail for the compliance people who ask uncomfortable questions later (KVKK, GDPR, EU AI Act).

started this because we kept seeing teams paste real customer data into prompts without thinking twice about it, ourselves included at some point. now it's the thing we work on full time out of Istanbul.

not here to pitch, mostly want to meet people building things and hear what you're working on. happy to talk shop on LLM infra, PII detection, or why our mascot ended up being a shrimp (they're small and they clean everything, felt right).

what are you building?

I've been letting Claude/Cursor do most of the typing lately and I noticed I stopped double checking what actually goes out in the API calls. then last week I caught myself pasting a real customer row into a prompt just to debug faster.

anyone else have a moment like that? where the vibe coded thing had a hole you'd never have shipped if you were writing it slower. secrets in a log, some data you didn't mean to send anywhere, whatever. My product is focusing on this and I would like to know is this a serious issue?