Shadow AI Security LimitedShadow AI Security Limited

What we do

Sensitive data is stopped in the browser, not chased afterwards

Blocking AI tools drives staff to personal devices. Shadow AI Security lets people use approved AI safely by removing the risk before it leaves the machine.

Browser-native by design

Detection and redaction run entirely inside the browser on the user's device. Your text is never transmitted to Shadow AI Security, never stored by us, and never processed by a third-party cloud service. That is what makes the control defensible to a regulator: the data simply does not travel.

Because there is no proxy or inspection gateway, there is no added latency, no TLS interception, and no single point of failure between your staff and the tools they use.

Covered AI tools

  • ChatGPT
  • Microsoft Copilot
  • Google Gemini
  • Anthropic Claude

Additional AI domains can be added to policy at no extra cost.

How deployment works

  1. 01

    Deploy to the browser

    A managed browser extension is rolled out through Intune, Group Policy, Jamf or your existing MDM. No servers to stand up, no network re-architecture, no agent on the endpoint.

  2. 02

    Watch the AI surfaces

    The extension activates on ChatGPT, Microsoft Copilot, Google Gemini and Anthropic Claude, plus any additional AI domains you add to policy.

  3. 03

    Detect sensitive content on device

    Typed and pasted text is analysed locally against pattern, contextual and dictionary rules tuned for UK health, legal, financial and public sector data.

  4. 04

    Redact before submission

    Matches are replaced with reversible placeholders. Staff keep the value of the AI tool; the underlying identifiers never cross the boundary.

  5. 05

    Prove the control

    Enforcement events are recorded without capturing the sensitive text itself, giving you defensible evidence for audits, DSPT submissions and DPIA reviews.

What we detect

  • Patient names and NHS numbers
  • Dates of birth and addresses
  • Clinical notes and diagnoses
  • Bank, account and card numbers
  • National Insurance numbers
  • Case and matter references
  • Client and counterparty names
  • Contract terms and pricing
  • Source code and credentials
  • Engineering drawings and IP references
  • Internal document classifications
  • Custom terms from your own dictionary

Production ready for regulated sectors

Tested against real NHS, legal and financial services workflows, with change control, rollback and support arrangements suited to organisations under regulatory scrutiny.

Arrange a technical walkthrough