Stop sensitive data
before it reaches AI.
Filtro is a browser extension that scans prompts, pastes and uploads the instant before they leave the browser — and blocks anything sensitive from ever reaching ChatGPT, Claude, Gemini or Copilot.
One-click install · Free for up to 5 users · No card required
Blocked by company policy
Social Security Number detected
Scanned on device · nothing sent to Filtro
Works out of the box on every major AI tool
How it works
Three surfaces. All scanned on device.
These three vectors are how sensitive data actually reaches AI tools. Every one is checked client-side, before anything leaves the browser.
Typed prompts
Detection runs on the prompt before the page’s own submit handler fires. If a rule blocks, the keystroke never leaves the composer.
Pasted content
The real-world leak: someone copies a customer list from Salesforce and pastes it in. Filtro scans the clipboard before it lands in the field.
File uploads
Files are read and scanned on the device before the upload begins. The filename and contents are never logged — only the file type.
Zero data storage
We log what happened. Never what was in it.
The event record is ten fields, by design. Your admin sees patterns and counts — “47 SSN blocks this week” — never the values behind them. Content never touches our servers.
- You cannot breach data you do not have.
- Employees trust a tool that provably cannot read their work.
- SOC 2, GDPR and HIPAA audits get simpler when the model is minimal.
Stored
- Timestamp of the event
- Which AI tool was open
- Which rule triggered
- Warned or blocked
- Hashed user id
Never stored
- The prompt text
- The pasted content
- The file contents
- The value detected
- Any AI response
Customizable
Every rule is a toggle.
No two orgs are the same. Healthcare turns on PHI detection. A marketing team turns off email. A law firm adds keywords blocking case names.
Set warn or block per rule, scope it to specific tools, and add your own keyword or regex patterns. Changes reach every extension within the hour — no reinstall, no Web Store resubmission.
Pricing
Core protection is always free.
SSN, credit card and API key blocking is never gated behind a plan. You upgrade for scale and customization, not for safety.
Starter
- Up to 50 users
- All built-in rules
- All AI tools
- 30-day log
- Email alerts
Business
Popular- Unlimited users
- Custom keyword rules
- SSO + SCIM
- 1-year log
- Compliance export
Annual billing gets two months free.
Ship controls, not policy PDFs
Give your CISO an answer for the board.
Simple enough that an employee installs it themselves. Serious enough to say: “We have controls on AI data leakage.”