Browser DLP for AI stops sensitive data at the moment it would leave the browser for an AI tool. VAHTOR's Chrome and Edge extension can cancel PDF, Excel and Office file attachments to AI sites and flag credentials and secrets on the device, without sending prompt text anywhere.
Block file uploads to ChatGPT, Copilot, Claude and Gemini
Turn on a Files rule and attaching a PDF, spreadsheet or Office document to a covered AI site is cancelled in the tab. The employee sees a banner explaining why, and an alert is logged without the file contents.
PDF, Excel and Office attachments cancelled in the tab
A banner tells the employee why
Alert logged without the file contents
Flag credentials and secrets before they are sent
Pattern checks run on the laptop. When text that looks like a password, API key or other secret is detected, it is flagged on the device. The workspace records the detection type and risk level, not the text.
Checks run on the device
Detection type and risk level recorded
Prompt text never uploaded
No proxy, no root certificate, no chat archive
People install a Chrome or Edge extension and join with a personal device code. Traffic is not routed through a proxy and HTTPS is not decrypted, so there is nothing to break for remote staff.
Chrome and Edge extension only
No root certificate or SSL interception
Works off-VPN
How this compares with endpoint DLP suites
Enterprise DLP suites such as Microsoft Purview Endpoint DLP cover many channels, including USB, printing and email, but need higher-tier licences and device onboarding. VAHTOR focuses on one channel, AI tools in Chrome and Edge, and is priced for companies of about 25 to 100+ employees.
Limits to know
Protection applies to Chrome and Edge on devices where the extension is installed. Desktop AI apps, mobile devices and other browsers are outside its reach, so pair browser DLP with device management and a clear AI policy.
Frequently asked questions
How do I stop employees uploading files to ChatGPT?
Use a control that acts in the browser before the upload is sent. With VAHTOR, turn on a Files rule: PDF, Excel and Office attachments to covered AI sites are cancelled in the tab, the employee sees a banner and an alert is logged. Microsoft 365 customers can also use Purview Endpoint DLP if their licence includes it.
Can we allow ChatGPT but block sensitive files?
Yes. Mark ChatGPT as approved and keep a Files rule on. People can keep using the tool, while PDF, Excel and Office attachments are cancelled.
Does browser DLP read employees' prompts?
Not with VAHTOR. Checks run on the device and prompt or chat text is never sent to VAHTOR. The workspace stores the detection type and risk level only.
Do we need Microsoft 365 E5 or a network proxy?
No. VAHTOR is a Chrome and Edge extension that people join with a personal device code. It does not depend on your Microsoft licence and needs no network changes.
Which VAHTOR plan includes DLP?
Real-time DLP is included in Business (€499/month + VAT, up to 100 employees) and Enterprise. Starter covers shadow AI discovery, AI policy and tool blocking, but not DLP rules.
Does it work in Firefox, Safari or desktop AI apps?
No. The VAHTOR extension is available for Chrome and Edge.
Add browser DLP to your AI stack
Create a workspace, choose a plan, and connect the extension.