Your staff are leaking regulated data into AI. APEX stops it at the keyboard.
Browser-native layer that intercepts SSNs, PHI, financial data, credentials, and source code across 12+ regulated categories before they reach any AI tool. 100% client-side. No prompt content ever leaves the device.
Deploys via Intune, GPO, or PowerShell · No self-serve signup
Prompt draft
“Summarize this patient: John Reyes, SSN 421-90-1142, ICD-10 E11.9, MRN 884-22-301…”
- Social Security NumberSSN
- PHI · ICD-10 diagnosis codeHIPAA
- Medical Record NumberMRN
Aligned with the frameworks enterprise buyers require
The Bleed
Your data is already leaving. Every day.
Your teams adopted generative AI faster than IT could govern it. APEX GuardRail is the AI data loss prevention layer you were missing — the one that stops every AI data leak at the keyboard instead of investigating the breach afterward.
The clipboard is the new USB drive
Staff copy SSNs, patient charts, deal terms, and API keys into ChatGPT every single day. There is no DLP for it — until now.
You can’t see it leaving
Generative AI adoption outpaced governance. Your sensitive data is flowing to public LLMs right now, and your SIEM has no record of it.
You can’t recall a paste
Once regulated data hits an external model, it is a reportable incident. There is no undo. The only defense is to stop it before it goes.
The cost of inaction is a reportable incident. A single SSN, PHI record, or CUI excerpt pasted into a public LLM is a data breach under most state laws and HIPAA. GuardRail is the control that prevents the exposure from happening at all.
Case Study · Reported Incident
Samsung engineers paste proprietary code into ChatGPT — three leaks in 20 days
What happened
Within weeks of authorizing ChatGPT use, engineers in Samsung's semiconductor division uploaded confidential material to OpenAI's servers in three separate incidents — with no NDA and no data residency controls in place.
- ①An engineer pasted buggy source code from a proprietary semiconductor database and asked ChatGPT to fix it.
- ②Another submitted an internal equipment defect-detection algorithm for optimization.
- ③A third pasted a transcript of a confidential internal meeting into the chatbot.
The fallout
Samsung issued a company-wide memo banning ChatGPT and capped any remaining uploads at 1,024 bytes. The leaked IP could not be recalled and risked surfacing in the model's responses to other users worldwide.
How GuardRail changes this
- Source code & internal meeting notes blocked at the keyboard — the prompts never leave the browser.
- Tamper-evident audit log captures the blocked attempt — security sees the exposure risk before it becomes an incident.
- No recall needed — regulated data never reached OpenAI, so there is nothing to chase down after the fact.
The Lesson
A blanket ban didn't undo the leak — it just pushed AI use into the shadows. GuardRail lets staff keep productive AI tools while the control runs silently in the browser.
How It Works
Seven detection layers, all in the browser
Every paste event runs through a tiered pipeline — fastest methods first, format-agnostic extractors for what patterns miss, local heuristics for edge cases only. No cloud model. No inference API. No prompt content transmitted at any stage.
Regex Fast-Pass
< 1ms · client-side
45+ compiled patterns — SSNs, credit cards (Luhn-verified), routing numbers, classification markings, ITAR/EAR, CJIS case numbers. Catches obfuscation: spacing, partial redaction, homoglyphs, leetspeak.
Format-Agnostic SSN
catches what regex misses
Extracts any 9-digit sequence regardless of separators — spaced, mixed, obfuscated, reversed, or OCR-corrupted — and validates it as a real SSN. The layer that catches what patterns miss.
Format-Agnostic Identifiers
structure-validated
Validates credit cards (Luhn), phone numbers, EINs, routing numbers, MRNs, and account numbers even when formatting is non-standard or stripped of separators.
Regulated Industry IDs
sector-specific
NDC drug codes, CUSIP/ISIN securities, ICD-10 and CPT medical codes, SCADA/NERC CIP asset tags — identifiers unique to healthcare, finance, and energy sectors.
Entropy + Encoding
< 5ms · client-side
Shannon entropy flags high-entropy secrets — API keys, AES/RSA key material, JWT/OAuth tokens — without a recognizable pattern. Decodes Base64, hex, URL-encoding, and ROT-13.
Contextual Lexicon
< 50ms · client-side
A context-aware lexicon across every industry — names, medical conditions, financial IDs, personnel records, legal privilege. Requires corroboration so a name alone doesn’t false-positive.
Semantic + Bypass
edge cases · client-side
A local decision tree scores intent — distinguishing test data from real PII. Detects jailbreaks, exfil channels, delimiter injection, and many-shot priming that pattern matching misses.
What It Blocks
Twelve categories. One interceptor.
Coverage spans every sensitive-information classification across all industries — PII, healthcare, financial, credentials, legal, government, infrastructure, and the attacks designed to evade detection. Each is a category of AI data leak GuardRail stops before it reaches ChatGPT, Copilot, Gemini, Claude, or Perplexity.
Personal Identifiers
- SSNs
- Passport & visa numbers
- Driver’s license
- Date of birth + name
Healthcare (HIPAA)
- PHI / medical records
- MRN & patient IDs
- Mental health & substance abuse
- ICD-10, NDC, CPT codes
Financial (PCI / GLBA)
- PAN / credit cards
- ACH routing & account
- IBAN / SWIFT / BIC
- EINs & TINs
Credentials & Secrets
- API keys & JWT/OAuth tokens
- AES-256 / RSA private keys
- AWS / GitHub / Slack tokens
- Database connection strings
Corporate Confidential
- Trade secrets & IP
- M&A and board material
- Source code & schemas
- Customer & pricing lists
Legal & Compliance
- Attorney-client privilege
- Grand jury / case material
- Export-controlled (ITAR/EAR)
- CUI / classified markings
Government & Public Sector
- CJIS records & case numbers
- FBI/ORI/NCIC identifiers
- IRS 1075 Federal Tax Info
- FERPA student records
Infrastructure
- Internal IP / IPv6 / CIDR
- VPN & firewall configs
- SCADA / NERC CIP assets
- MAC addresses
Personnel & HR
- Salary & compensation
- Termination & PIP records
- Employee badge / CAC / PIV
- EEO complaints
Attack & Bypass
- Jailbreaks (DAN, crescendo)
- Delimiter & XML injection
- Many-shot priming
- Exfil webhooks & mailto
Exfiltration Channels
- External webhook URLs
- mailto: data smuggling
- Data URI payloads
- Encoded redirect links
Obfuscation
- Reversed / spaced strings
- Base64 / hex / URL-encoded
- Unicode homoglyphs
- Leetspeak variants
The real detection engine runs the same code your staff’s browsers will.
Governance, Risk & Compliance
From DLP to a full GRC platform
GuardRail stops the leak. The APEX Governance Framework add-on closes the loop — a unified Governance, Risk, and Compliance suite that maps every control to NIST AI RMF, ISO 27001, ISO 42001, and PCI SSC so you implement once and satisfy every framework together.
Govern
AI governance charters, policies, and NIST AI RMF implementation — establish accountability before AI goes live.
- AI Governance Charter
- AI Policy Generator
- NIST AI RMF Checklist
- ISO 42001 Checklist
Risk
Risk assessment matrices, vendor AI evaluation, and data sovereignty scans — quantify and triage AI risk across your stack.
- Risk Assessment Matrix
- Third-Party AI Validator
- Data Sovereignty Scan
- Bias & Fairness Audit
Compliance
ISO 27001, PCI SSC, COBIT, and HIPAA checklists with crosswalks to NIST AI RMF — one implementation, every framework satisfied.
- ISO 27001 Annex A
- PCI SSC Suite (DSS/PA/PTS/P2PE)
- COBIT 2019 Checklist
- PIA Generator
Cross-mapped to the standards your auditors use
“No prompt content leaves the endpoint” — technically proven
Skeptical? Good. Every claim below is independently verifiable with standard browser developer tools. No vendor trust required.
All four detection layers execute synchronously inside the browser’s JavaScript event loop. Open DevTools → Network tab during any detection and you’ll see zero outbound calls carrying prompt text. The only network calls are license validation and, if you submit feedback, anonymized finding metadata (type, severity, host) — never the matched text. Verifiable independently. No trust required.
Deployment
Live across your fleet in under five minutes
Deploys through the endpoint management tools you already run. No agents, no proxies, no network changes. Works across Chrome, Edge, Firefox, and Safari.
Microsoft Intune
Managed browser extension via Intune MDM. Chrome, Edge, and Firefox profiles. Zero-touch rollout to all enrolled Windows 10/11 devices.
Group Policy (GPO)
ADMX template included for granular per-OU policy. Single-click .exe wrapper for registry-based force-install on domain-joined workstations.
PowerShell
Silent installer package for remote deployment to targeted device collections with pre/post conditions and automatic retry logic.
Task Scheduler
Schedule installs during maintenance windows, enforce version compliance, and report deployment status back to your management dashboard.
Pricing
One product. Tiered by headcount. No per-seat games.
Organization-wide coverage from day one. Guided onboarding ensures the policy fits your data before a single browser is locked down.
APEX Standard
Up to 300 employees
Organization-wide coverage, no per-seat pricing.
- All 12 detection categories
- Chrome, Edge, Firefox, Safari
- Intune / GPO / PowerShell deploy
- Tamper-evident audit log
- SIEM export (CEF / JSON)
- Allow-list for approved AI tools
- Shadow AI discovery
APEX Pro
301–500 employees
Everything in Standard, scaled for growing fleets.
- Everything in Standard
- Custom detection policies
- HMAC-signed audit integrity
- Priority support
- Department-level reporting
- Policy committee workspace
APEX Enterprise
501–1,000 employees
Air-gapped deployment for regulated industries.
- Everything in Pro
- Air-gapped / offline deployment
- Dedicated onboarding engineer
- NIST SP 800-53 mapping docs
- Custom risk-scoring thresholds
- SIEM integrations (Splunk / Sentinel)
APEX Custom
1,000+ employees
Volume licensing, multi-org rollouts, and bespoke detection.
- Everything in Enterprise
- Multi-org / multi-tenant rollout
- Bespoke detection lexicons
- SSO + SCIM provisioning
- Quarterly security review
- Custom MSA / DPA terms
Already a customer and ready to expand into a full governance program?Explore the APEX Governance Framework →
Questions
Everything you need to know
AI data loss prevention (AI DLP) is the set of controls that stop sensitive information — SSNs, PHI, financial data, source code, and credentials — from being pasted or uploaded into generative AI tools like ChatGPT, Copilot, and Gemini. APEX AI Guardrails is a browser-native AI DLP solution: it inspects and blocks prompts at the keyboard, before they ever reach the model.
Stop the bleed. Today.
Every day without APEX AI Guardrails is another day your regulated data flows to public LLMs. See it block in a guided demo run against your own environment.
No prompt content leaves the browser · Verifiable in DevTools · Air-gapped deployment available