Chado AI

Discover, classify, and control AI tool usage at work.

# Chado AI Enterprise AI Security & DLP Chado AI helps organizations securely manage employee use of AI tools in managed Chrome browsers. It discovers the AI services employees use including previously unknown or unapproved tools assesses their risk, and enforces your organization’s AI-usage policies directly in the browser. Sensitive information can be detected, redacted, or blocked before it is submitted to an AI service. Chado AI is designed for **enterprise-managed environments**. The extension is deployed and configured by IT through Chrome Enterprise policies and requires organization enrollment. It is not intended for standalone personal use. ## Key Features ### Shadow AI Discovery Detect AI services employees use based on request behavior, not only domain names. This helps identify unknown, white-labeled, self-hosted, and proxied AI services. ### AI Tool Risk Scoring Automatically assign each detected AI tool a **0–100 risk score** based on factors such as: * Vendor jurisdiction * Data-training practices * Enterprise security capabilities * SSO availability * Self-hosting options * Other security and compliance factors Administrators can review the score and its underlying factors in the Chado AI console. ### Policy Enforcement Create policies for individual AI tools, risk levels, user groups, or time periods. Depending on your policy, Chado AI can: * Allow access * Display a warning * Redact sensitive information * Block the request or tool ### Clear Blocking & Access Requests When an action is blocked, employees receive a clear explanation of what happened and which policy was triggered. Employees can also request an exception directly from the browser. Requests are sent to administrators with the relevant context for review. ### Sensitive Data & Secret Detection Detect sensitive information directly in prompts, including: * AWS access keys * GitHub, Google, OpenAI, and Anthropic API keys * Stripe and Slack tokens * JWTs * Private keys * GCP service-account credentials * Email addresses * Phone numbers * Payment card numbers * National identifiers ### Inline Redaction For policies that allow it, sensitive values can be automatically replaced with placeholders before the request is submitted, allowing employees to continue their work without exposing the original data. ### Hard Blocking For restricted data categories, Chado AI can cancel the request in the browser so the content is not submitted to the AI service. ### Prompt Inspection Chado AI can inspect the content submitted by the user at send time, allowing protection to continue working across AI websites even when their underlying network request formats change. ### Network-Level Protection Maintain a network-level blocklist for prohibited AI domains as an additional layer of defense alongside browser-based enforcement. ### Warn & Acknowledge Allow controlled use of higher-risk AI tools while requiring employees to acknowledge the warning and, when configured, provide a business justification. ### Complete Audit Trail Security administrators can review detections, policy decisions, and enforcement actions in the Chado AI console, with events associated with the relevant employee, browser, and device. ### Configurable Data Retention Organizations control how prompt content is handled: * **Full retention**: store prompt text * **Hash-only**: store a one-way hash instead of the prompt * **Zero retention**: do not retain prompt text **Zero retention is enabled by default.** ### Security Alerts Send blocking and critical security events to external systems through an outbound webhook, including Slack-compatible integrations. ### Unified Device Identity Chado AI can integrate with the Chado AI desktop agent so browsers on the same managed machine share a consistent device identity for more accurate incident attribution. ### Zero-Touch Enterprise Deployment IT administrators can force-install and configure the extension through Chrome Enterprise policies. Employees do not need to manually enter an organization token or configuration URL. ### Signed Policy & Catalog Updates Policy and AI-tool catalog updates are cryptographically signed and verified before being applied. ### Self-Hosted Deployment Organizations with strict data-residency or infrastructure requirements can configure the extension to communicate with their own Chado AI backend, keeping collected security data within their infrastructure. ## Built for Enterprise Security Teams Chado AI gives organizations visibility and control over employee AI usage without requiring employees to change how they work. It provides a centralized way to discover AI usage, assess risk, protect sensitive information, enforce policy, and investigate incidents. **Designed for deployment by IT and security administrators in managed Chrome environments.**