Shield360

Shield360 AI policy: allow or block AI tools, and check prompts for sensitive data before they are sent.

Shield360 puts your organisation's AI policy to work in the browser, at the moment people use AI tools. Generative AI makes it easy to paste a customer list, an API key or a contract into a chat window without a second thought. Shield360 checks what is about to be sent and applies the rules your organisation sets in the Shield360 platform, before anything leaves the browser. WHAT IT DOES • Controls which AI tools can be used. For each AI tool, your organization chooses to allow it, show a warning first, or block it. • Checks prompts for sensitive data before they are sent. Shield360 looks for: – API keys, cloud credentials, access tokens and private keys – passwords and database connection strings – payment card numbers, bank account numbers (IBAN) and US Social Security numbers – email addresses and phone numbers • Acts on your organization's policy: – Warn: shows what kind of data was found. If your policy allows it, the person can still send the prompt after giving a reason. – Mask: replaces the sensitive values with placeholders such as [EMAIL_1] before sending, so the AI can still help with the rest of the prompt. – Block: stops the prompt and explains why. • Flags sensitive data as soon as it is pasted, so people can fix it before they even press send. • Gives compliance and security teams evidence. Each decision is recorded in your organisation's Shield360 account: which tool, what kind of data, what action was taken and which policy applied. PRIVACY BY DESIGN • Checking happens entirely in your browser. Prompt text is never sent to Shield360 or anywhere else. • A record of a decision contains the kind of data found and a masked sample (for example, the last four digits of a card), never the value itself. • The extension only runs on the AI sites listed above. WHO IT IS FOR Shield360 is for organizations that use the Shield360 platform (shield360.ai). You need an account with your organization to use it. • Installing it yourself: after installing, open Shield360 from the Chrome toolbar and enter the connection code your administrator gives you. • Administrators: create connection codes and set the policy under Settings → Collection & enforcement in Shield360. You can also deploy the extension to every managed browser through Google Admin, Intune or Jamf, with no action needed from employees. Questions: privacy@thinkfleet.ai