Protection, kept up to date.
Your organization’s policies sync automatically, about every minute.
Disconnect permissions are controlled by your administrator.
Enroll this browser
Get a one-time code from your administrator in Browser protection. Admin keys and MCP client keys cannot enroll a browser.
Website access
Configured sites sync from your administrator. New sites need browser permission and a page reload. Registration does not verify a live website’s layout; test paste, Enter, and Send before rollout.
What is protected?
Text pasted into top-level ChatGPT, Claude, Gemini, and Google Search / AI Mode on google.com web editors, plus full drafts submitted through supported Enter, Send-button, and form paths. Secrets are blocked. Personal data is masked only after you approve the preview. Clean submissions resume the original send action once. For sensitive submissions, Apply masking changes the editor only; review it and press Send again. Shift+Enter and IME composition remain available.
Draft text is scanned inside this extension. Only device and decision metadata goes to your gateway. A valid policy can be cached for up to five minutes; without one, protected paste and submission paths are blocked.
Typed text already exists in the website editor and could be collected before Send. Other upload methods, unsupported submission paths, native apps, mobile apps, and CLI tools need separate controls. Reload AI tabs after installing or updating. This is a browser message guard, not a network-wide DLP proxy.