An LLM gateway is a layer between your applications and the language models they use. Instead of every application managing its own keys, providers and rules, they all send requests to one endpoint. The gateway decides which model answers, keeps the keys in one place and records what each request costs.
A gateway makes models interchangeable and usage visible. It does not know your company knowledge. For a model to answer questions from your documents, it needs a RAG engine. This post explains both and shows when you need which.
- An LLM gateway puts access to many language models behind one endpoint, with central keys, rules, cost control and logs.
- A gateway does not know your documents. Answers from your knowledge, with sources, come from a RAG engine that finds the right passages and passes them to the model.
- Gateway logs contain questions and often passages from your documents. Check where they are stored and who may see them.
What is an LLM gateway?
Many companies no longer use just one language model. One team works with a large hosted model, another with a small local one, and for some tasks a cheaper model is good enough. Each application would then have to manage its own keys, providers and error handling.
An LLM gateway takes that work away. It sits between the applications and the models and offers them a shared endpoint. The application says what it needs; the gateway forwards the request to the right model and returns the answer. Think of a gateway as a switchboard: everyone calls the same number, the switchboard connects them and keeps a record of the calls.
Gateways exist as open-source software you run yourself and as a service. Exactly which features are included differs from product to product.
What an LLM gateway takes care of
Most gateways cover five tasks. Not every product does everything; the table shows what matters.
| Task | What the gateway does | Benefit |
|---|---|---|
| Routing | sends requests to the right model, to a fallback model if one fails | models stay interchangeable |
| Keys | manages API keys centrally instead of in every application | fewer keys in circulation |
| Costs | measures usage per team or application, sets limits | no surprises on the bill |
| Logs | records who used which model and when | traceability |
| Rules | defines which models are allowed and, depending on the product, filters sensitive data | consistent policies |
For IT, this is mainly a matter of order: instead of many separate integrations, there is one place where models, keys and costs are managed.
LLM gateway or RAG engine: what is the difference?
Gateways and RAG engines are often mentioned together, but they solve different problems. The gateway decides which model answers. The RAG engine decides what it answers from.
LLM gateway
- Forwards requests to models.
- Does not know your documents.
- The answer is only as good as the model’s knowledge.
RAG engine
- Finds the right passages in your documents.
- Passes them to the model with the question.
- The answer names the source it comes from.
A RAG engine is therefore more your AI’s memory than its traffic control. It reads in your stores, builds a search index and passes your documents to the model so it answers from them instead of guessing. How that works is explained in the post on the RAG system.
When you need a gateway, a RAG engine or both
Whether you need a gateway depends on how many models and applications you run. Whether you need a RAG engine depends on whether the AI should know your company knowledge.
Question an employee asks about a policyRAG engine finds the right passagesGateway routes question and passages to an allowed modelAnswer with source the model answers, the source is shown
To start with, a RAG engine with one or two models is often enough. A gateway pays off when many applications and teams use models and you want to control costs and rules centrally. If your gateway offers a compatible endpoint, it can usually be added as a custom model in a RAG engine; check the details in the documentation of both products.
Your own API keys and where your data goes
Many teams use models with their own API key, also called bring your own key (BYOK). The model provider then bills you directly, and you keep control of the contracts. A gateway helps manage these keys centrally.
Important for data protection: a gateway carries not only questions but, with RAG, also passages from your documents. Gateway logs can therefore contain confidential content.
All points ticked. Well prepared.
Language models in RAGSuite
RAGSuite is not an LLM gateway but a knowledge engine: it connects your sources, finds the right passages and delivers answers with sources. You choose the language model per project, from several hosted providers to a local model via Ollama. You can switch at any time; if the embedding model changes, you rebuild the search index with one click.
In RAGSuite Engine, model usage is included through credits (how credits work). Switch on your own API key and the plan price stays the same, with no credits used. The pricing page and the AI cost calculator show what that costs.
For AI tools that should query your knowledge, RAGSuite also provides an MCP server. That way, tools outside RAGSuite also get answers from your documents, with sources.
See for yourself how RAGSuite delivers answers with sources, with the model of your choice: free for 7 days with the RAGSuite Engine Starter plan or in a call with Sanjay.
Frequently asked questions
What is an LLM gateway in simple terms?
An LLM gateway is a layer between applications and language models. All applications send their requests to one endpoint; the gateway forwards them to the right model, manages API keys centrally, records costs and logs usage.
What is the difference between an LLM gateway and RAG?
The gateway decides which model answers. RAG decides what it answers from: a RAG engine finds the right passages in your documents and passes them to the model, so the answer is based on your knowledge and names a source. The two can be combined.
Do I need an LLM gateway?
If many applications and teams use different models and you want to control keys, costs and rules centrally, yes. To get started with company knowledge, a RAG engine with one or two models is often enough.
Is an LLM gateway GDPR-compliant?
That depends on how it is run. A gateway carries questions and, with RAG, passages from your documents. Check where the gateway runs, what it logs, for how long and which model providers receive data. With a self-hosted gateway and a local model, everything stays in your own network.
Is RAGSuite an LLM gateway?
No. RAGSuite is a knowledge engine: it connects your sources and delivers answers with sources. In RAGSuite Engine you use Standard, Advanced or Frontier models via credits, self-hosted also local models via Ollama, and you can use your own API key. With your own key, the plan price stays the same and no credits are used. All rules: How credits work.
Sources
- RAGSuite: Pricing (as of 28 October 2026): own API key, credits
- OWASP Top 10 for LLM Applications 2025: LLM02 Sensitive Information Disclosure, LLM10 Unbounded Consumption
- RAGSuite documentation: models and settings
Sanjay is CTO at RAGSuite. He writes about architecture, self-hosting, open-source models and AI security.