Browser-native DLP for the AI era. Priivy intercepts 200+ secret profiles — PII, API keys, OAuth tokens, cloud credentials, source secrets — at the keyboard, before a single byte reaches ChatGPT, Claude, Copilot, or any other model.
An employee pastes a customer record into a chatbot. Priivy is already there, rewriting the request in flight. The model sees safe placeholders, the audit log sees the truth, the original PII never crosses the network.
Regex finds the obvious things. Priivy's hybrid engine runs Luhn, Verhoeff, and country-aware validators alongside a Rust-native NER model. That means real SSNs, not just nine digits. Real card numbers, not invoice IDs.
Replace with a tag. Mask the middle. Hash with a per-tenant salt. Encrypt for later reversal under audit. Every operator is right-to-left and offset-stable, so the model still understands the sentence.
Policies are versioned. Unredact is a separate scope, behind a confirmation, written to an append-only ledger. Your compliance officer doesn't ask what was sent. They look it up.
Priivy replaces a twelve-process Python service with one Rust binary. Single-digit millisecond detection on a paragraph. Sub-millisecond on a tweet. Numbers from our Criterion suite, reproduced on a 2024 MacBook Pro M3.
Reproducible from crates/priivy-bench · Presidio 2.2, Python 3.12, identical recognizer set.
US SSN, MBI, ITIN. UK NHS. India Aadhaar. Brazil CPF. AWS, GCP, Azure keys. Stripe, OpenAI, Anthropic tokens. JWTs, private keys, OAuth refresh. Most providers ship a generic regex pack. Priivy ships 200+ TOML profiles you can audit, fork, and replace.
Individuals install the browser extension and run the engine locally. Enterprises add the Priivy Appliance from AWS Marketplace as the centralized control plane — policy, identity, audit, and unredact for every seat in the org. Same engine. Same ledger.
A Chrome and Edge MV3 extension that runs the full detection engine locally in WebAssembly. No servers, no round-trips, free forever. Works on chat.openai.com, claude.ai, gemini.google.com, GitHub Copilot, and any text field you use.
Install free for individualsThe centralized control plane for every extension in your org. Push policy, federate identity via SCIM, hold the unredact keys, and own the audit ledger. Available only on AWS Marketplace, with flat per-appliance pricing. No per-vCPU surprises. Deploys to ECS, EKS, or App Runner.
Subscribe on AWSDetection inside the browser was the start. Next, the same engine moves up the stack — discovering the AI tools your org didn't sanction, and into the OS — blocking sensitive paste before any process can read it.
Surface every unsanctioned AI tool an employee touches. Catalog model usage across ChatGPT, Claude, Gemini, Copilot, Mistral, Perplexity, Cursor, v0, and any new endpoint hit from a managed browser. Rank by data sensitivity, not by traffic. Hand security a single inventory instead of an alert firehose.
A signed macOS and Windows agent that catches PII the browser can't — desktop chat clients, IDE assistants, clipboard exfil, native apps. Same Rust engine, same policy graph, same audit ledger. The browser extension and the endpoint agent share one identity and one ruleset.
Want early access? Talk to the founders — design partners are shipping with us.
Free for individuals. Per-seat for teams. Flat per-appliance pricing on AWS Marketplace. Pricing, like our detection engine, has no surprises.
Running a regulated estate? Talk to the founders.