CompliTru AI Governance Chrome extension security report

CompliTru scans every prompt in real-time before it is sent to an AI tool. When sensitive data is detected, the prompt is blocked before it reaches the provider. You see exactly what was found, choose to block or allow, and every decision is logged. No proxy. No VPN. No network changes. WHAT IT DETECTS Credentials and Secrets: - AWS access keys and secret keys - API keys and tokens from major AI and SaaS platforms - Private keys, certificates, and database connection strings - Bearer tokens, OAuth tokens, and plaintext passwords Personally Identifiable Information: - Social Security Numbers - Credit card numbers and bank account numbers - Email addresses and phone numbers Protected Health Information: - Medical record numbers and patient identifiers - Dates of birth associated with patient records Infrastructure: - Internal and private IP addresses Image Scanning: - OCR-based detection of sensitive data in uploaded images - Scans screenshots, photos of documents, and pasted images before upload 20 detection patterns across 4 categories. Enterprise customers can add custom patterns for organization-specific data. HOW IT WORKS 1. You type or paste into any supported AI tool 2. A warning banner appears if sensitive data is detected 3. When you submit, the prompt is intercepted before it reaches the network 4. A blocking modal shows what was detected with severity ratings 5. You choose to block or allow 6. If no action is taken, the prompt is automatically blocked after 5 minutes 7. Every detection and decision is logged The prompt cannot reach the AI provider if blocked. FREE VS ENTERPRISE Free: - Real-time detection and blocking - All 20 detection patterns - Image OCR scanning - Local detection only, nothing leaves your browser Enterprise (via complitru.ai): - Centralized governance dashboard - Team-wide visibility across all employees - Slack and Microsoft Teams alerts - Audit trail export - Compliance mapping for SOC 2, HIPAA, PCI-DSS, NIST, and GDPR - Custom detection patterns - Policy enforcement and admin-push deployment PRIVACY All detection happens locally in your browser. No data is stored or transmitted unless you connect to the optional enterprise dashboard. COMPLIANCE Detection patterns map to SOC 2, HIPAA, PCI-DSS, NIST 800-53, GDPR, and CCPA controls. Visit complitru.ai for enterprise features.