Browser extension
A check before text reaches an AI site.
On the Growth plan and up. In Chrome and Microsoft Edge, on 8 AI sites, the extension checks what people paste or send against your workspace's rules, on their own computer.
What it does
Your rules, at the moment of sending.
- Pasting text into the message box
- Sending a message with Enter or the send button
- Choosing a text file with the site's file picker (.txt, .md, .csv, .json and other plain-text types, up to 1 MB)
It uses the scanner's rules and your confidential keywords: pattern matching with checksums, not meaning. It never rewrites text: it holds it back, hands it back to edit, or lets it through exactly as written.
Three modes
You choose what happens.
For the whole workspace, with a stricter rule for any tool your register marks Restricted. A tool marked Not allowed has its whole site blocked.
Observe
Nothing is stopped. Findings are recorded as counts per rule, so you can see what would have been flagged.
Warn
The person sees what was found and chooses: edit their text, or send it anyway with a reason.
Block
The person cannot send it. They can edit their text or ask an admin for an exception.
Reasons people can give for sending anyway: this tool is approved for this kind of data; it is test or made-up data; what was found is not sensitive; i need to send it and take responsibility. Picked from the list, never typed, so a reason cannot carry the data itself.
Where it works
8 AI sites, in Chrome and Edge.
Sites change their pages without notice. When one does, the extension may stop checking it there until it is updated.
ChatGPT
chatgpt.com, chat.openai.com
Claude
claude.ai
Gemini
gemini.google.com
Microsoft Copilot
copilot.microsoft.com
Perplexity
www.perplexity.ai, perplexity.ai
DeepSeek
chat.deepseek.com
Mistral Le Chat
chat.mistral.ai
Poe
poe.com
What it does not cover
It is not data-loss prevention.
It checks the listed sites, in two browsers, on the paths above. Everything else is outside it, and we say so.
- Desktop and phone apps (the ChatGPT, Claude or Copilot apps, for example)
- Browsers other than Chrome and Microsoft Edge, and private windows unless IT allows the extension there
- AI websites not on the list above
- Images, screenshots, PDFs, Word and other Office files, and archives
- Files dragged and dropped onto the page, and uploads through other routes than the file picker
- Text typed in pieces and sent by a site's own shortcut or voice input
- Text read out of the page by the AI site itself, or anything sent after the page changes how it works
Use it with an AI use policy people agree to, and the register of approved tools. Nothing found never means safe.
What your workspace sees
Counts, not text.
Reported to your workspace
- The site (for example chatgpt.com)
- What happened: observed, warned, sent anyway, blocked, or an exception asked for
- How: paste, send or text file
- Which rules matched, and how many times
- For Send anyway, the reason picked from a fixed list
- The person's work email, the browser and the extension's version
Never leaves the computer
- The text, or any part of it
- What matched, even masked
- The file, or its name
- The page, the conversation or the site's reply
The extension receives your workspace's confidential keywords so it can check for them on the computer. It runs only code that ships inside it.
For IT
Installed by IT, set up once.
Installed by your IT team
Your IT team installs it from Openn Shield, which hosts it and keeps it up to date, with Google Admin, Microsoft Intune, Jamf or another device manager, or a policy file. The Controls page gives the settings to copy. Chrome and Edge allow this on managed company computers only, so it is not for personal computers.
One enrolment token
IT gives the extension your workspace's token through managed settings, which people cannot change. Each browser trades it for its own key on first start.
See every browser
Controls lists each enrolled browser: whose it is, its version, when it last checked in, and what it reported. Remove one and it stops at its next check-in.
When the rules cannot load
You choose: let people send, with a mark on the extension's icon, or stop anything the built-in checks find until the rules load.
Put your AI rules where people use AI.
On Growth, Business and Enterprise.