Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Dymium announced a $7 million funding round in March 2024 to develop a data-security platform that includes SecureChat, an enterprise portal for using public or private large language models (LLMs) with sensitive information. Its central idea is to enforce access policies and transform data when it is requested, rather than relying on extra copies of datasets.

What is Dymium?

Dymium is a data-security company whose platform is designed to apply centralized security and compliance rules when a person or application requests data. The company describes the platform as session-aware and real-time: it returns data in the format the user or application needs, while applying policies to each access request.

Dymium says its approach transforms data in transit rather than creating duplicate data stores. That may help avoid stale copies and the extra work of keeping separate datasets in sync. These are product-design claims, not independent evidence that the platform prevents breaches or meets a particular compliance requirement.

Did Dymium really raise $7 million?

Yes. Dymium announced on March 20, 2024 that it had emerged from stealth with $7 million: $5 million from Two Bear Capital and $2 million from angel investors. The company said the proceeds would support product development and expand sales and marketing. Two Bear Capital founder and managing partner Mike Goguen joined Dymium’s board; Lou Pambianco, Tim Richardson, Melanie Corcoran, and Paul Temple joined as advisers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

SecurityWeek independently reported the round on March 21, 2024, and described Dymium as a California startup based in Los Gatos. A funding announcement establishes that the company reported raising capital; it does not, by itself, establish product-market fit, customer adoption, revenue, or security effectiveness.

How does SecureChat protect prompts?

SecureChat is an enterprise AI portal positioned between users and public or private LLMs. Dymium says it detects personally identifiable information (PII), payment card information (PCI), and protected health information (PHI) in prompts. When it finds sensitive values, it substitutes synthetic but similar values before forwarding the prompt to a model, then reconstitutes the answer for the user. The stated goal is to keep original secrets within the organization while still allowing people to use AI tools.

Dymium’s product page says users can review substitutions before sending a prompt, and that SecureChat integrates with existing identity and access management (IAM) infrastructure. Those controls matter because prompt sanitization is only one part of an enterprise workflow: teams also need to decide who can use which models, what information may be sent, and how returned content is handled. The available product descriptions do not provide independent benchmarks of detection accuracy or answer-reconstruction quality.

What is GhostAI, and how does it relate to Dymium?

Dymium’s current site presents GhostAI as a secure gateway spanning four risk areas: models, context, tools, and data. The company says it can mask or tokenize sensitive fields at access time, avoid ETL processes and copied datasets, and generate immutable audit logs. These are company-described capabilities; the material available here does not independently verify their performance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Dymium’s FAQ describes several components of the broader platform:

  • GhostDB presents governed data through a PostgreSQL-like interface.
  • GhostAPI creates REST APIs driven by prompts.
  • GhostMCP provides security for MCP through filtered and transformed access to GhostAPI.
  • GhostFiles supports redaction for files mounted from SMB, S3, SFTP, or Google Drive.
  • GhostLLM exposes an OpenAI-compatible interface to GhostAI.

Together, these descriptions position Dymium as more than a chat front end: its stated scope includes controlled access to data, files, APIs, and AI models. Organizations should confirm which components are available in the edition and deployment they are evaluating.

Can Dymium run on-premises or in an air-gapped environment?

Dymium’s materials describe several deployment options, but they refer to different parts of the offering. The SecureChat product page says it can run as a virtual machine on AWS, Azure, or on-premises. The broader platform FAQ describes AWS-based SaaS and says it can also be packaged for private cloud, on-premises Kubernetes, or air-gapped environments.

Deployment option What Dymium says
AWS-based SaaS The broader platform FAQ describes this as a delivery option.
AWS or Azure virtual machine The SecureChat product page says SecureChat can run as a virtual machine on either cloud.
Private cloud The broader platform FAQ says the platform can be packaged for private cloud.
On-premises The SecureChat product page lists on-premises virtual-machine deployment; the broader FAQ also lists on-premises Kubernetes.
Air-gapped The broader platform FAQ says the platform can be packaged for air-gapped environments.

These descriptions do not specify which features, integrations, or operational requirements apply to every deployment option. Buyers should confirm the exact architecture and support boundaries with Dymium for their intended configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Does Dymium integrate with Okta or Microsoft Entra ID?

Dymium’s FAQ documents OpenID Connect (OIDC) integration with Okta, Microsoft Entra ID, Ping, and Keycloak. It says group membership is used for authorization. That provides an identity integration path, but the available description does not detail the granularity of policy controls or explain how group-based permissions map to every product component.

Who might consider Dymium?

The platform is aimed at organizations that need to control access to sensitive data while supporting applications and AI workflows. Potential stakeholders include enterprise security, privacy and compliance teams, developers, and data teams. The stated use cases may be especially relevant to sectors handling sensitive information, including healthcare, finance, defense, and digital infrastructure.

When assessing Dymium or another enterprise AI-security product, compare where controls operate and how the system behaves in practice:

  • Whether protections apply at the data-access layer or only to network traffic or documents.
  • Whether data is transformed in place or copied or moved into separate stores.
  • How accurately prompts and responses are anonymized or reconstructed.
  • How identity, authorization, and policy rules are managed.
  • Which deployment models, data sources, and AI tools are supported.
  • What audit records are produced and how they can be reviewed.
  • How much integration and ongoing administration the deployment requires.

Dymium’s announcement cited 24.8 million sensitive data files and said 61% of organizations store sensitive data in multiple locations, attributing both figures to sources it cited in the March 20, 2024 release. The release repeats those figures rather than publishing the underlying study, so they should be treated as attributed statistics, not independently verified measurements here. Dymium’s 2026 site also says 78% of employees use AI weekly; that is a company-site claim.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.