Detection as it is typed into ChatGPT and Gemini. Local substitution with realistic synthetic data. Local restore in the reply. No vendor server in the data path.
Conventional approaches either cut access or log the incident after the fact. Either way the employee under pressure opens the platform on a phone, and the information leaves anyway, this time outside your visibility.
ContextShield takes the problem from the other end. The work continues. Detection and substitution happen in the browser, before anything is sent.
Analysis happens entirely on the workstation. No text is sent to a classification service, so no third party sees what the employee writes.
A SIN becomes another plausible SIN, valid under Luhn. The model still understands the request.
Original values return in the reply, on the workstation, with no round trip to a vendor.
Two platforms only, ChatGPT and Gemini. That is deliberate. We cover what we can demonstrate in front of your team.
Any identifier outside this list falls under a customization module, priced case by case.
The extension ships from the management tooling you already run. No vendor console to learn, no accounts to provision, no tunnel to open. Policy stays centralized on your side.
Standard forced-install policy, no custom package.
Entry added directly to your existing GPO by your own IT team.
Same managed policy model for macOS endpoints.
The reporting dashboard, if adopted, is hosted on a server you own.
Thirty-six seconds. Typing, detection, substitution, send, reply, restore. No edit between the steps.
A vendor promising compliance puts you at fault. Here are the real boundaries, written so your privacy officer can quote them as is.
Deployed across 50 seats at a Montreal para public institution.Deployed through Microsoft Intune · 11 month term
Write to us with your context. We reply with an honest read of what the tool covers in your environment and what it does not.
communication@contextsecurity.ca