Desktop guard
A check before copied text reaches an AI app.
On the Growth plan and up. On Mac and Windows computers, while ChatGPT, Claude, Microsoft Copilot and Perplexity is the app in front, the guard checks what is on the clipboard against your workspace's rules, on the person's own computer.
What it does
Your rules, before the paste.
- Text on the clipboard, while one of the listed apps is the app in front
- Each copied text once, the first time a listed app is in front while it is there
It uses the scanner's rules and your confidential keywords: pattern matching with checksums, not meaning. It never edits what someone copied. If it cannot load your rules, it does nothing until it can.
Three modes
You choose what happens.
For the whole workspace. A tool your register marks Not allowed, or Restricted with its own stricter rule, makes its app stricter, never less strict.
Observe
Nothing is shown or changed. Findings are recorded as counts per rule.
Warn
A notification names what is on the clipboard, masked, before the person pastes. The clipboard is not changed.
Hold
The clipboard is replaced with a one-line notice, so pasting gives the notice instead. The original stays in memory for 60 seconds with a Restore choice.
Hold changes the clipboard, so it is said plainly: in the installer before it installs, and on screen each time. The original is kept in memory only, for 60 seconds, and the person can put it back. Hold acts only while a listed app is in front.
Where it works
4 desktop apps.
Apps can change in an update. When one does, the guard may stop recognising it until the guard is updated.
ChatGPT
Claude
Microsoft Copilot
Perplexity
- macOS: macOS 13.3 or later (JavaScript for Automation with the regular expressions the rules use)
- Windows: Windows 10 or 11 with Windows PowerShell 5.1 (built in)
What it does not cover
It is not data-loss prevention.
It checks the clipboard, while one of the listed apps is in front. Everything else is outside it, and we say so.
- Apps not on the list above, including other AI apps and AI features inside other apps
- Text typed into the app, dictated, or sent by the app's own shortcuts
- Files dragged and dropped, attached or uploaded, and images or screenshots
- Linux, phones and tablets
- Computers where the agent is not installed, or was stopped or removed by someone with the rights to do so
On macOS 15.4 and later, macOS may ask each person once whether the guard may read the clipboard; if they say no, it cannot check. Use it with an AI use policy people agree to, and the register of approved tools. Nothing found never means safe.
What your workspace sees
Counts, not text.
Reported to your workspace
- The app (for example ChatGPT)
- What happened: observed, warned, held, or put back by the person
- Which rules matched, and how many times
- The computer's user name, its name and system version, the guard's version
Never leaves the computer
- What was copied, or any part of it
- What matched, even masked
- Anything typed, any file or screenshot
- Which other apps were open
The guard receives your workspace's confidential keywords so it can check for them on the computer.
For IT
Installed by IT, set up once.
Installed by your IT team
Your IT team installs it from Openn Shield: install.sh for macOS and install.ps1 for Windows, with your workspace's enrolment token, from a one-line Terminal or PowerShell command. As administrator they install for everyone on the computer; without, for one person.
Jamf and Intune
The set-up page gives the Jamf Pro script parameters and a notifications profile, and the Intune Win32 app commands and detection rule.
Plain text you can read
Every file is a script or data, shown with its SHA-256. The installers check the guard against it before installing, so a changed file is refused.
See every computer
Controls lists each person's guard: computer, system, version, last check-in and what it reported. Remove one and it stops at its next check-in.
Tested so far
What we have checked, and what we have not.
- macOS 27: the guard's rule engine on the full test corpus, and Hold, Restore and Observe run end to end on a private test clipboard against Openn Shield
- Windows 10 and 11: the rule set as data proved equal to the web rules on the corpus; the Windows guard itself is not yet tested on a Windows computer
- Each app's identifier: confirmed on a real Mac for Claude and Perplexity; the others are listed from vendor or third-party documents until checked
Put your AI rules where people use AI.
On Growth, Business and Enterprise.