Now onboarding pilot firms in the Nordics  ·  Book 30 minutes →

Let your team use AI without leaking sensitive data

Vaktor masks sensitive data in the browser before it reaches ChatGPT or Claude, and gives you the audit trail to prove it. Built for teams that handle things they can't afford to leak.

Works with ChatGPT Claude Gemini Perplexity
EU EU data residency · Stockholm GDPR-first architecture DORA & NIS2 evidence exports 100% on-device detection

Enterprise AI won't stop
them using personal accounts

0%
It runs on personal accountsA third of workplace ChatGPT sessions, outside SSO and retention
80%
It leaks from your best peopleMost exposure is staff moving fast, not attackers
0%
A policy can't prove a thingOf prompts carry sensitive data, and a document has no record of one
Cyberhaven Labs, 2026 AI Adoption & Risk Report  ·  Gartner, Market Guide for AI TRiSM

Vaktor closes the gap where it opens, in the browser, before anything leaves the device.

What happens to a prompt

Your team

Opens claude.ai as normal

no new login

The tools they know, the way they already work.

Vaktor, on the device

Strips the sensitive parts

runs locally

Names, personnummer, IBANs and org numbers are replaced before the prompt leaves the machine.

The AI

Sees a clean prompt

answer still works

And compliance gets a metadata trail to export on request.

See it strip a prompt live

What you type
What the AI receives

The field above is editable. Masking runs in your browser, which you can confirm in the network tab (F12). The demo recognizes Swedish personnummer, org numbers, IBANs, emails and a sample client list. Demo data uses official Swedish test numbers.

Don't trust us, verify it

Vaktor sits outside the prompt path by design. Detection runs on the device, and our backend receives metadata only. Your security consultant can confirm it with standard network monitoring. The claim is checkable, and that is the point.

Ask your AI if we're right

One click opens a fresh chat with the question already written. The models know this problem well

Questions buyers ask us

What does it store?+
Categories, counts and timestamps. Never prompt content, which stays on the device. Even a breach of our own backend would expose nothing a client told you in confidence.
Which AI tools does it cover?+
ChatGPT, Claude, Gemini and Perplexity in the browser, each on the user's own account. Copilot next. New surfaces ship as updates to the same extension.
What about the desktop apps?+
Browser first, since that's where the work is. A lightweight desktop agent is on the roadmap, and the audit trail already accounts for it.
Does it slow people down?+
No. Masking happens inline as they type, on their own machine, in milliseconds. Nobody changes how they work.
How do we know nothing leaves the laptop?+
Your security team can confirm it with standard network monitoring. Vaktor is never in the prompt path.
GDPR, DORA, NIS2?+
Masking supports data minimization before anything reaches a third-country model, and the audit trail slots into DORA and NIS2 evidence. Your DPO keeps the judgment.

Give your team AI,
and the proof you stay in control

A 30-minute call. We show you exactly what would stay on the laptop, on your own prompts