See every file that leaves. Stop the ones that shouldn't.

Prism DLP checks what your team pastes and uploads into ChatGPT, Claude and Gemini against your data policy. API keys, card numbers and customer records stay where they belong; everything else goes through untouched.

Talk to usHow it works

Prism DLP

Paste blocked

This contains an API key, password or other secret, and chatgpt.com isn't approved for it.

What happens when someone pastes

  1. 1

    Someone pastes or uploads

    The Prism extension sees text pasted or files uploaded into ChatGPT, Claude or Gemini before the site receives them. Nothing on any other website is touched.

  2. 2

    Prism redacts, then decides

    Secrets and personal data are swapped for placeholders first. Detectors and your policy then decide: allow, warn, or block. Most pastes go through without anyone noticing.

  3. 3

    Your team sees what happened

    The person is told exactly what was found and where it was going. Your security team sees the event in the Prism console, redacted, with the reason anyone gave for continuing.

We keep the evidence, not the secret

Prism replaces detected values with typed placeholders before anything is stored, queued or logged. Your security team can see that a card number went to an AI tool, and who sent it, without Prism ever holding the number.

Pasted

Refund jane.doe@example.com on card 4242 4242 4242 4242, order 88213.

Stored

Refund [EMAIL_1] on card [CARD_1], order 88213.

Start quiet, then tighten

Every organisation starts in Observe. When the false positives have settled, switch on warnings, then blocking, from the console.

Observe
Record every match and interrupt no one. Start here while false positives settle.
Warn
Show people what was found and let them continue with a reason.
Enforce
Block critical matches outright and warn on the borderline ones.

Deployed by IT

A Chrome extension, force-installed and configured through your Chrome or Google Workspace policy. Nothing for people to set up.

Hosted in the UK and EU

The service and database run in London and the Netherlands. Each organisation's data is isolated from every other's.

No raw content kept

Detected values are redacted before storage. We don't sell data, use it for advertising, or train AI models on it.