Bring Your Own Key — customers use their own Anthropic / OpenAI / DeepSeek API key for LLM calls. SaleSea never touches your token content, and token cost goes to your own account.

Mid-to-large customers / enterprises / data-sensitive industries. Direct benefits: 1) compliance (data doesn't flow through SaleSea servers); 2) cost savings (volume discounts on your own account); 3) model flexibility (Claude Opus / GPT-4o etc.).

Go to Settings → Enable BYOK → paste your API key (Fernet-encrypted at rest) → takes effect immediately. Hybrid is supported: some employees use BYOK, others use platform LLM.

BYOK · Bring Your Own LLM Key

Enterprise customers use their own Anthropic / OpenAI key. SaleSea never touches your tokens — your account handles billing.

📅 2026-05-22

BYOK = Bring Your Own Key. Mid-to-large customers use their own LLM key — the platform never touches your prompt/response, billing goes to your own Anthropic/OpenAI account. Compliance-friendly + saves money + model flexibility.

Why BYOK

SaleSea defaults to platform LLM (gpt-5.4-mini via relay). But for mid-to-large customers:

Compliance: Finance / healthcare / government customers' prompts cannot flow through 3rd-party servers
Cost: Volume on your own OpenAI account → enterprise discounts
Model flexibility: Claude Opus / GPT-5 top models, no free-tier restrictions
Data ownership: Your LLM account has the complete audit log, independently auditable

Supported providers

Anthropic Claude Haiku / Sonnet / Opus
OpenAI GPT-4o / GPT-4o-mini / GPT-5.x series
DeepSeek deepseek-chat / deepseek-reasoner
Custom OpenAI-compatible Any relay or self-hosted LLM endpoint (e.g., local Llama)

How to enable

Go to Settings
Find the "BYOK" section
Paste API key — auto Fernet-encrypted at rest, no longer readable
Immediate effect — next call uses your key

Hybrid mode

BYOK is not all-or-nothing:

Normal employees → platform LLM (cheap)
Supervisors / decision-makers → BYOK Claude Opus (expensive but accurate)
One workspace all BYOK, another all platform

Security

BYOK key storage:

Fernet AES-128 encryption (key rotated every 90 days)
Storage isolation (key in vault table, association ID in business table)
Decrypted only at the moment of LLM call + cleared after use
All BYOK calls logged to audit log (12-month retention)