Siphrix — AI Action Monitor

Records what AI web apps do with your data and warns you about the risky parts. Audit-first: nothing is ever blocked.

Siphrix watches the AI web apps you already use — ChatGPT, Claude, Gemini, Copilot, Perplexity — and keeps an honest record of what leaves your hands. WHAT IT DOES • Notes when you open an AI site and when you send a message, so the record shows what was used and when. • Notices when a file is uploaded to an AI app. • Notices when what you paste looks like a secret — an API key, a token, a password. • Writes each of these to your own Siphrix log, in plain language. • Raises the risky ones as warnings you can read later. WHAT IT DOES NOT DO • It does not block anything. Audit-first is the whole design: an observer must not break the thing it observes. • It does not read your conversations. Only metadata is recorded — the kind of action, the site, the time. Never message text, never file contents. • It does not record your browsing. There is no mode in which visiting a page, on its own, produces a record anywhere outside the named AI sites. • It has no telemetry. Nothing is sent to the developer, ever. IF YOUR ORGANISATION MANAGES IT On a work machine enrolled in Siphrix, your administrator chooses the watch scope, and the extension shows you the whole decision in its popup — "What is watched on this machine". Two scopes exist: • Listed sites only (the default): the AI sites above, plus any your administrator adds, minus any they switch off. • Everywhere except listed sites: on ordinary pages, the ONLY thing watched is a paste shaped like a secret or personal data (and whether a page is itself an unlisted AI chat tool, reported as a bare hostname). Opening or reading a page is never recorded. This wider scope also needs your own consent: the browser asks you for site access before it applies, and until you grant it, nothing beyond the AI sites is watched — the extension tells you and your administrator so, rather than pretending. The first time it runs, and whenever what is watched changes, a page states it in plain words; the extension records that it opened that page — the time and the notice version — and nothing about what the person does with it. Your organisation may add one line of its own under those words — a contact, or where its own notice is — shown as plain text after "From your organisation:", never as a link; the rest of the page is Siphrix's own statement about what the software does, and nobody can edit it. If your organisation has approved one tool for a category, the corner mark on other tools of that category names it, with a link — nothing is blocked or redirected. WHERE YOUR DATA GOES On its own, this extension keeps no record: a record needs somewhere to live, and the extension deliberately has no store of its own. Until you give it one — Siphrix on the same computer, or a console you connect with a code — it watches and warns in the page, and nothing is kept anywhere. If you also run Siphrix on the same computer, the extension asks it which machine this is and hands its records to it — so the browser needs no account of its own, holds no token, and its activity appears under the computer it happened on rather than as a separate device. That conversation is local; it never leaves the machine. If you have a siphrix.com account and no Siphrix on this computer, you can connect the browser directly with a one-time code. That is the only case in which the extension stores a credential, and it is never automatic. WHY AI assistants now act on your behalf at machine speed. You cannot watch every action, but you should be able to answer "what did it do?" afterwards. That is all Siphrix is: the record, and the warnings that come from it. Source-available under the Business Source License 1.1. Privacy policy: https://siphrix.com/privacy.html