The three modes
| Mode | Provider | PHI policy |
|---|---|---|
| Fast default | External LLM | Identifiers are aliased before the prompt leaves for a non-BAA provider, and restored on the response. Do not rely on this for PHI: use BAA mode. |
| Private | Local / BAA-approved | PHI stays on-device or on BAA-allowlisted destinations only. |
| BAA | External LLM with signed BAA | PHI allowed under your BAA. Requires explicit acknowledgement. |
Per-call override
Every /run and /openai/chat/completions call accepts a phi_mode param. The response includes phi_mode + phi_reason + phi_guardrail_applied so you can verify which rail fired.
BAA acknowledgement
Turning on BAA mode requires you to tick the box "I have a signed BAA with my chosen provider and I accept responsibility for PHI sent to them."