Privacy policy – DomKnox DLP browser extension

Last updated: 2026-10-31

What the extension does

DomKnox DLP checks files and text that a user uploads, drags or pastes into AI chat services (for example ChatGPT, Claude or Gemini) for personal data and security-sensitive information, and blocks, warns or offers redaction according to the rules set by the user's organisation.

Content never leaves your device

All inspection happens locally in the browser. File contents, pasted text and detected values are never sent to DomKnox or any third party.

What is sent to the DomKnox server

• Licence check: the organisation's company code, a random installation ID generated by the extension, the extension version and browser name. Used to verify the licence and count licences in use.
• Audit metadata (for the organisation's administrator): time, AI service domain, channel (upload/drop/paste), the decision and the outcome, the categories and number of findings, file size, file type, a SHA-256 fingerprint of the file, and a justification if the user wrote one. No file names, contents or matched values.

No names, e-mail addresses, browsing history or other personal data are collected by the extension.

Storage and retention

Data is stored by DomKnox on Cloudflare infrastructure and audit metadata is deleted after 12 months. The organisation that holds the licence is the controller; DomKnox acts as processor on its behalf.

Contact

Questions about this policy: contact the administrator of your organisation, or DomKnox at the address on domknox.se.