Your team is pasting company data into AI tools.
You can ban the tools and watch people use their phones instead, or you can find out what is actually happening. Capsulla goes out through Google Admin — nobody installs anything, nobody can switch it off — and within a week the console tells you what leaves your browsers, and who it leaves with.
Watch first, block later
Nothing has to be stopped on the first day. Run it quietly for a week and the console fills with the things nobody thought to mention: the customer list pasted into a chatbot, the key that keeps turning up in tickets, the database dump someone uploaded to a converter site.
What the log holdsThen you decide what stops
Block it, warn the person, mask the sensitive part so the paste still works without the secret, or keep recording quietly. Four lists cover pasting, typing, uploads and downloads — and you describe what matters in plain words rather than writing a regular expression.
How the rules workProof that it is actually on
Browsers appear here the moment they check in, so the page shows what is really out there rather than who you asked to install it. When somebody asks whether the company is covered, this is the answer.
A quiet row usually means a laptop that is off — though a removed extension looks the same, so read it as who reported in.
Email you will actually open
Pick the moments worth interrupting your day for, and leave the rest to a daily or weekly summary. Nothing in the mail but the rule, the site and the person — the matched text never leaves the device, so forwarding an alert leaks nothing.
Blocked: [AWS_KEY] on chat.example.com
- When
- Today, 14:22
- Who
- dana@yourcompany.com
- Rule
- [AWS_KEY] — block on paste
Live this afternoon
Force-install the extension from Google Admin, paste one line of policy, done. No agent, no proxy, no certificate, no change to anyone's workflow — and no project plan to get it approved.
{ "orgKey": "cap_org-code" }Worth knowing
- The matching runs in the browser, on the device. The console is told that a card number matched on a site at 14:22 — never the number.
- Everyone you invite can change the whole policy, and only the owner can delete the organization.
The rest of the console
Stop the next leak before it leaves the browser.
Try it free for 14 days, no card needed. Start with one team and see what Capsulla catches in the first week.