Browser DLP Suite

Browser DLP Suite (v1.0) – Overview The Browser DLP Suite is a Chrome extension designed to protect sensitive data across multiple layers of security. It provides granular control over data handling, ensuring protection whether data is viewed on-screen, shared with external AI platforms, or transmitted across the network. 1. Global Policy Setup & Administration - All settings are centrally managed by the Extension Administrator through the extension interface. Key Components: * Global Settings: Always visible; defines primary domain keywords for internal email and PII management. * Feature Selector: Dropdown to switch between different security policies (e.g., Masking, URL Blacklist). Global Email Whitelist: * Defines internal email domains (e.g., company.com). * Ensures internal employee PII is not masked, enabling seamless internal communication. 2. PII Masking & Submission Control - Prevents accidental exposure of sensitive information on web pages or AI platforms. A. Mask PII on Pages * Masks personal and financial data (PAN, Aadhaar, phone numbers, email, salary). * Exceptions can be set per domain or PII type. Example: PAN → *******34F, Salary → Rs. XX,XXX/-. B. Mask AI Chat Input * Prevents PII leakage to AI platforms like Gemini and ChatGPT. * Intercepts Enter or Paste events, applies masking rules before submission. * Supports host-specific mechanisms for reliable masking. 3. Policy & Restriction Features - These enforce administrative policies for secure file handling, network access, and authentication. A. File Scan * Blocks uploads containing sensitive content (keywords like SECRET_PROJECT, SSN). * Monitors common file types (TXT, PDF, DOCX). B. URL Restriction * Blocks navigation to blacklisted domains (e.g., youtube.com, facebook.com). * Displays warning when access is denied. C. Clipboard Restriction * Blocks pasting to untrusted applications/sites. * Whitelisted domains (e.g., internal-jira.com) are exceptions. D. Download Restriction * Prevents local file downloads. * Redirects files to secure cloud environments (Google Docs/Sheets). E. Domain Authentication Restriction * Ensures logins only use approved organizational or partner domains. * Blocks authentication with unauthorized emails to prevent accidental data exposure. Summary: The Browser DLP Suite offers end-to-end data protection, controlling how sensitive information is viewed, shared, and accessed across the browser. Its layered approach ensures compliance, reduces risk, and enables secure collaboration across the organization.