How Prism works, from the paste to the console
Prism sits between your people and the AI tools they use. It checks what's about to leave, decides with the rules you set, explains itself to the person, and records the event for your team, redacted. Here's each step, as it really looks.
Where it checks
Two sensors, deployed by IT. Each sends Prism only what it needs to decide, at the moment someone pastes, uploads or sends.
- Browser extension Chrome, Edge
- Pastes, file uploads and typed messages in 88 AI websites, on any computer. An optional all-sites version checks pastes and uploads everywhere except sites you skip.
- Mac agent macOS
- Pastes into 3 AI desktop apps and into terminals running 7 AI command-line tools such as Claude Code and Codex CLI. Records files copied to USB drives and cloud-sync folders.
- Windows agent Next
- The same coverage for Windows PCs, deployed with Intune or your MDM.
What it looks for
Detectors for secrets, payment and personal data run on every event. Card numbers, IBANs and NHS numbers must pass their check digits, and a date only counts as a date of birth when it's labelled as one, so order numbers and ordinary dates don't set them off. Add your own: project codenames, client names, document templates.
Secrets and keys
[AWS_KEY_1][AWS_SECRET_1][OPENAI_KEY_1][ANTHROPIC_KEY_1][STRIPE_KEY_1][GITHUB_TOKEN_1][SLACK_TOKEN_1][GOOGLE_KEY_1][PRIVATE_KEY_1][JWT_1][CONN_STRING_1][SECRET_1]
Payments and banking
[CARD_1][IBAN_1][BANK_1]
Personal data
[EMAIL_1][PHONE_1][DOB_1]
Health and government IDs
[NHS_1][MRN_1][NINO_1][PASSPORT_1][DRIVING_LICENCE_1][SSN_1]
Yours
[PROJECT_CODENAMES_1][CLIENT_NAMES_1]
Each is the placeholder Prism stores in place of the value it found.
How it decides
You set each AI tool to allowed, warn, blocked or work accounts only, and choose a mode for the organisation. Prism combines that with what it found: a secret going anywhere is serious, a colleague's email address in an approved tool usually isn't.
| AI tool | Setting |
|---|---|
| ChatGPT | Work accounts only |
| Claude | Allowed |
| Perplexity | Warn |
| DeepSeek | Blocked, suggests Claude |
What people see
Usually nothing. When Prism steps in, it says exactly what it found and why, and offers a way forward: send it without the sensitive parts, continue with a reason, or open the approved tool instead.
Prism DLP
Check before you paste
This contains a customer's email address and a card number. chatgpt.com is approved for internal information, not customer data.
Why is it fine to paste this here? Required to continue; your security team sees it.
What your team sees
Every event in the console, redacted, with who, where, what was found, what happened and the reason given. Plus the AI tools in use across the organisation and by whom, and risk notes on 21 AI services, so you can decide which to approve.
- Trains on free plans
- Yes, opt-out available
- Trains on business plans
- No
- Business plans
- ChatGPT Business, Enterprise, Edu
- Headquarters
- United States
- Time-limited exceptions: let one person use a blocked tool until a date, tied to their managed work identity.
- Audit log: every setting change, who made it and when.
- Your retention: keep events for as long as you choose; 90 days by default.
Alerts and exports
Send events where your team already works. Each destination has a guided set-up and a test button, and receives only redacted information.
- SlackAdd to Slack, pick a channel
- Microsoft TeamsWorkflows webhook, adaptive cards
- SplunkHTTP Event Collector
- WebhooksSigned with Standard Webhooks
- Events APIRead keys, cursor paging, for any SIEM
Deployment
The extension is force-installed by Google Admin, Chrome policy or your MDM, with its settings pushed the same way. The Mac agent is a signed, notarised package with a configuration profile, for Jamf or any MDM. We give you ready-made files, a rollout guide and a staff notice to send first.
- 1Create your organisation and a sensor key in the console
- 2Push the extension and agent to a pilot group
- 3Run a week in Observe and review what Prism finds
- 4Switch on warnings, then blocking, when you're ready
See it on your own team, free
We'll set up your organisation and help you deploy to a pilot group. You'll see what's going into AI tools from the first day of the pilot.