DomKnox DLP
DomKnox DLP reads the file in the browser and stops national ID numbers, customer data and passwords – before the document reaches ChatGPT, Claude or Gemini. Your people keep the AI. You keep control.
Word, Excel, PowerPoint and PDF files are checked locally on the computer. No content is sent to us.
| Name | Personal ID no. | Salary account | Salary |
|---|---|---|---|
| Anna Testsson | 811228-9877 | SE17 5000 … 4477 | 41 200 |
| Erik Exempelsson | 790314-2154 | SE24 5000 … 4854 | 38 900 |
| Maria Provberg | 850607-3424 | SE31 5000 … 5231 | 44 500 |
| Johan Mallgren | 920119-5710 | SE38 5000 … 5608 | 36 300 |
| Sara Demosson | 881130-6642 | SE45 5000 … 5985 | 39 750 |
| Karl Mönsterberg | 760925-1333 | SE52 5000 … 6362 | 47 100 |
| Lina Fiktivsson | 951002-4080 | SE59 5000 … 6739 | 35 600 |
| Name | Personal ID no. | Salary account | Salary |
|---|---|---|---|
| Anna Testsson | [PERSONNUMMER_1] | [IBAN_1] | 41 200 |
| Erik Exempelsson | [PERSONNUMMER_2] | [IBAN_2] | 38 900 |
| Maria Provberg | [PERSONNUMMER_3] | [IBAN_3] | 44 500 |
| Johan Mallgren | [PERSONNUMMER_4] | [IBAN_4] | 36 300 |
| Sara Demosson | [PERSONNUMMER_5] | [IBAN_5] | 39 750 |
| Karl Mönsterberg | [PERSONNUMMER_6] | [IBAN_6] | 47 100 |
| Lina Fiktivsson | [PERSONNUMMER_7] | [IBAN_7] | 35 600 |
DomKnoxAI chats have become an everyday work tool. The documents uploaded there end up with an external provider – often outside the EU, often on a personal account with no agreement in place. It shows up in no log and cannot be undone.
Finance, Tuesday morning
The payroll needs reconciling. The Excel file with names, ID numbers and account numbers for 140 employees is uploaded with the question why don't the totals add up?
Customer service, a complaint
A case needs a quick reply. The whole case is uploaded – with the customer's ID number, address and details of a sick leave – and the request write a friendly reply
.
IT, late in the evening
A configuration file is uploaded for troubleshooting. It contains the database password, an API key and internal server addresses.
4 %
GDPR. Fines of up to 20 million euros or four per cent of global annual turnover. Disclosing personal data to an AI service without a legal basis and a data processing agreement can be a personal data breach that must be reported.
2 %
NIS2. Essential entities can face fines of up to ten million euros or two per cent of turnover. Management must approve and oversee the security measures – and can be held liable.
1 file
Trust. A single customer register or a single file of passwords in the wrong place is enough. Banning AI does not work either – it gets used anyway, on personal accounts.
DomKnox DLP is an extension for Chrome and Edge. It opens and reads every document that is about to be uploaded or dragged into an AI chat – and acts on the company's own rules before the file is sent. Pasted text is checked the same way.
Employees add the extension from a link – or IT rolls it out to every computer through Intune or Group Policy.
The code links the extension to your company and your rules. Without an active code the extension does nothing.
Blocked: Customer_register.xlsxClean documents upload as usual. Documents with sensitive content are blocked, trigger a warning or are sent as a copy with the data replaced by placeholders.
Customer registers, documents marked confidential and files with passwords or keys. The file is not uploaded.
Customer_register.xlsxstopped
A copy of the document is sent, with ID numbers and account numbers replaced by [PERSONNUMMER_1]. The AI can still help.
811228-9877becomes[PERSONNUMMER_1]
Documents with email addresses or internal details – and files that cannot be read. The employee sees what was found and decides.
Quote_draft.docx2 email addresses
Every file is opened and read locally, including metadata and numbers in spreadsheets. Numbers are validated against check digits and dates, so order numbers and ordinary dates do not raise false alarms.
National identity numbers from the Nordics and the rest of the EU, passport numbers, bank accounts and card numbers – and sensitive data such as health or trade union membership when it is linked to a person.
GDPR
Passwords, API keys, private keys and connection strings.
NIS2
Internal IP addresses, server names and firewall configuration.
NIS2
Customer names, project names and number formats that you add yourselves. Documents marked confidential.
Your rules
Scanned PDFs, images and password-protected files cannot be read – there you choose whether the extension should warn or block.
You pay a fixed monthly fee for the company, based on the number of users. Installation, updates and the account panel are included.
Tell us a little about yourselves and we will show you how it works with your own documents – it takes half an hour.
Word, Excel, PowerPoint, PDF, OpenDocument, CSV, text files and code. Scanned PDFs, images, archives and password-protected files cannot be read – there you choose whether the extension should warn or block.
No. All checking happens locally in the browser. Only the licence check and a log of metadata are sent to our server – which AI service, which decision and which type of data was found. Never the content or the values that were found.
ChatGPT, Claude, Gemini, Microsoft Copilot, Mistral, Perplexity, DeepSeek and more – plus the internal AI tools you add yourselves in the account panel.
Google Chrome and Microsoft Edge on Windows and Mac.
No, the extension protects AI used in the browser. We recommend blocking the desktop apps through Intune or Group Policy, so that all AI use goes through the browser where DomKnox checks it. We help with the settings.
Yes. Every company has its own rules in the account panel: what should be blocked, redacted or only warned about, your own words and number formats, and which AI services to cover. Passwords and keys are always blocked.
DomKnox is a technical safeguard that supports your GDPR and NIS2 work by reducing the risk of personal data and security information ending up with external AI services. It does not replace your own legal assessment or your agreements with the AI providers.
The same day. You get a company code and an installation link. With Intune or Group Policy, IT rolls the extension out to every computer at once.