Every AI call, on the record.

Either. Install it in your own environment — on Docker, or on Kubernetes with manifests we provide, against your own ClickHouse and Postgres, including fully air-gapped — or use the hosted service, where each organization gets its own database. Both are the same software with different configuration, so a hosted pilot can move in-house for production.

Not unless you choose to put it there. The collector installs no certificate, changes no proxy setting and opens no listening socket. It reads files the AI tools already write and tables the operating system already keeps, then sends what it found outbound over TLS. The one part that does sit in the path is the optional AI proxy, and only for applications you point at it by base URL. It needs no root certificate, and traffic you do not route through it never reaches it.

Data protection runs at the point of use. The browser extension, in managed Chrome and Edge, allows, warns about or blocks the AI sites on its list, and on eleven AI chat sites, ChatGPT, Claude, Gemini and Microsoft Copilot among them, can warn about, mask or block a prompt carrying a secret or personal data before it is sent. Hooks inside coding agents can warn or block. Where you want enforcement on the wire, the optional AI proxy applies the same policy and can refuse models outside your approved list, and your own applications can ask the guard check API before they send text to a model. One organization-wide policy drives all of them.

Data protection reads a prompt before it is sent, so it can act on it. Storing it is a separate choice, and it is off by default: no prompt, response or tool content is kept unless an administrator turns that on. What is always kept is the model, token counts, cost, the guard's decision and the kinds of sensitive data found. An environment can only store less than its organization, and secrets are always scrubbed from anything stored.

The hosted service has published plans: Free, Team and Business, each with apps, computers, spans and retention included, and add-ons for more. Paid plans start with a 14-day trial, no card needed. See pricing. Self-hosted and air-gapped deployments are Enterprise: book a briefing and we’ll price it with you. Or start free on the hosted service.