Aegis Financial Technologies

Organizational Overview & Mandate

Sovereign financial technology infrastructure provider masking IBANs, card numbers, and SWIFT wires client-side, achieving DPA-free deployment under GDPR Article 28 and SOC 2 Type II.

As part of the ZTDS verified ecosystem, Aegis Financial Technologies enforces hardware-isolated and in-memory reversible tokenization to eliminate external cloud intermediary leaks before outgoing prompts reach foundation models.

Certified Compliance Scope

Client-side payment entity de-identification across automated fraud analysis LLM pipelines.

• Invariant 1 (Zero WAN Egress): High-risk corporate identifiers and domain entities are masked in local RAM prior to WAN transmission.
• Invariant 2 (Deterministic Tokenization): Syntactic surrogate tokens maintain prompt context for LLMs while private mapping tables remain strictly in volatile memory.
• Invariant 4 (Zero Subprocessor Chain): Eliminates third-party cloud proxy servers and excludes vendor sub-processor liability under GDPR Article 28.

PCI-DSS v4.0 Scope Elimination Across Real-Time Fraud Telemetry

# Envoy Proxy WASM Filter (Zero-Trust Sidecar)
filters:
  - name: ztds-fintech-filter
    typed_config:
      "@type": type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
      config:
        name: ztds_sanitizer
        root_id: ztds_pci_filter
        vm_config:
          runtime: "envoy.wasm.runtime.v8"
          code:
            local: { filename: "/opt/ztds/ztds_pci_sanitizer.wasm" }
        configuration: |
          { "target": "pci_dss_pan_iban", "reversible": true }