Security · Sovereignty · Law 25

No vendor infrastructure in the data path

Every security lead asks the same question: where does the data go. Here is the full answer, including the parts that do not flatter us.

Data path

The text does not leave the workstation

Detection and substitution happen in the browser, before anything is sent. There is no remote classification service to query, so no copy of the employee's text reaches Context Security or any processor acting for us.

The mapping between original and synthetic value stays on the workstation for the length of the session. It serves the local restore in the reply, then it is gone.

Architecture

Three properties you can verify

Each one can be observed by your own team during a pilot, without taking our word for it.

No backend

No account to create, no token to exchange, no outbound call to our systems during use.

Client-held data

The reporting dashboard, if adopted, installs on a server you own.

Policy on your side

Configuration is pushed by your fleet management tooling and stays editable without going through us.

Boundaries

What the tool does not do

Written to be quoted as is inside your privacy impact assessment.

  • Legal classificationPseudonymization is reversible. Under Law 25 the data remains personal information. Exposure is reduced, the classification does not change.
  • ComplianceNo tool makes an organization compliant. ContextShield supports your obligations and documents a reasonable measure.
  • PerimeterManaged browser only, on ChatGPT and Gemini. A personal device outside the fleet stays out of coverage.
  • DetectionCoverage is the formats listed under native scope. An identifier specific to your sector requires a dedicated module.
  • Compromised endpointAn already compromised workstation stays compromised. The tool acts on transmission to the platform, not on device security.
Get in touch

Your security questions, in writing

Send your vendor questionnaire or assessment grid. We answer in writing, including where the answer is no.

communication@contextsecurity.ca
Context Security Inc. · Quebec, CanadaContextShield · Chrome and Edge