Guides
Short, practical answers to the questions companies ask about shadow AI, AI data leaks, EU AI Act AI literacy and privacy-friendly AI governance.
The most reliable way is to measure it where AI is used: in the browser. A browser extension on company Chrome or Edge shows which AI sites people actually open, so you get a live inventory instead of a one-off survey. With VAHTOR, ChatGPT, Copilot, Claude, Gemini and the rest show up in one registry — without collecting what people type.
Read the answer →Combine a clear rule with a technical control at the point of use. Publish an AI policy that says which data must never go into AI tools, then enforce it in the browser, where files and text are sent. VAHTOR’s Files rule cancels PDF, Excel and office file attachments to AI tools before they leave the tab, and credentials and secrets are flagged on the device.
Read the answer →Article 4 of the EU AI Act requires providers and deployers of AI systems — including companies whose staff use tools like ChatGPT at work — to take measures to support the AI literacy of their staff and other people using AI on their behalf. It has applied since 2 February 2025; after the Digital Omnibus amendments no specific “sufficient” level is mandated, and national market surveillance authorities supervise it from August 2026. No certificate is needed: the European Commission says organisations can keep an internal record of trainings and other guidance.
Read the answer →Govern from usage metadata and on-device checks instead of chat content. To govern AI you need to know which tools are used, whether rules fired and who accepted the policy — not what people wrote. VAHTOR is built that way: prompt text is never collected, and admins see the tool, a detection type and a risk level, not the message.
Read the answer →Create a workspace, apply a trial code or choose a plan, then connect the extension.
Get started
