Browser DLP Suite

Browser DLP Suite (v1.0) – Overview
The Browser DLP Suite is a Chrome extension designed to protect sensitive data across multiple layers of security. It provides granular control over data handling, ensuring protection whether data is viewed on-screen, shared with external AI platforms, or transmitted across the network.

1. Global Policy Setup & Administration - All settings are centrally managed by the Extension Administrator through the extension interface.

Key Components:
* Global Settings: Always visible; defines primary domain keywords for internal email and PII management.
* Feature Selector: Dropdown to switch between different security policies (e.g., Masking, URL Blacklist).

Global Email Whitelist:
* Defines internal email domains (e.g., company.com).
* Ensures internal employee PII is not masked, enabling seamless internal communication.

2. PII Masking & Submission Control - Prevents accidental exposure of sensitive information on web pages or AI platforms.

A. Mask PII on Pages
* Masks personal and financial data (PAN, Aadhaar, phone numbers, email, salary).
* Exceptions can be set per domain or PII type.
Example: PAN → *******34F, Salary → Rs. XX,XXX/-.

B. Mask AI Chat Input
* Prevents PII leakage to AI platforms like Gemini and ChatGPT.
* Intercepts Enter or Paste events, applies masking rules before submission.
* Supports host-specific mechanisms for reliable masking.

3. Policy & Restriction Features - These enforce administrative policies for secure file handling, network access, and authentication.
A. File Scan
* Blocks uploads containing sensitive content (keywords like SECRET_PROJECT, SSN).
* Monitors common file types (TXT, PDF, DOCX).

B. URL Restriction
* Blocks navigation to blacklisted domains (e.g., youtube.com, facebook.com).
* Displays warning when access is denied.

C. Clipboard Restriction
* Blocks pasting to untrusted applications/sites.
* Whitelisted domains (e.g., internal-jira.com) are exceptions.

D. Download Restriction
* Prevents local file downloads.
* Redirects files to secure cloud environments (Google Docs/Sheets).

E. Domain Authentication Restriction
* Ensures logins only use approved organizational or partner domains.
* Blocks authentication with unauthorized emails to prevent accidental data exposure.

Summary:
The Browser DLP Suite offers end-to-end data protection, controlling how sensitive information is viewed, shared, and accessed across the browser. Its layered approach ensures compliance, reduces risk, and enables secure collaboration across the organization.