Filtro
NewOn-device DLP for every AI tool

Stop sensitive data before it reaches AI.

Filtro is a browser extension that scans prompts, pastes and uploads the instant before they leave the browser — and blocks anything sensitive from ever reaching ChatGPT, Claude, Gemini or Copilot.

One-click install · Free for up to 5 users · No card required

chatgpt.com
Filtro active
Draft the offer letter for our new hire — SSN 078-05-1120, start date Monday.
!

Blocked by company policy

Social Security Number detected

Send

Scanned on device · nothing sent to Filtro

Works out of the box on every major AI tool

ChatGPTClaudeGeminiCopilotPerplexityGrok+ any unknown AI, flagged as shadow

How it works

Three surfaces. All scanned on device.

These three vectors are how sensitive data actually reaches AI tools. Every one is checked client-side, before anything leaves the browser.

01

Typed prompts

Detection runs on the prompt before the page’s own submit handler fires. If a rule blocks, the keystroke never leaves the composer.

02

Pasted content

The real-world leak: someone copies a customer list from Salesforce and pastes it in. Filtro scans the clipboard before it lands in the field.

03

File uploads

Files are read and scanned on the device before the upload begins. The filename and contents are never logged — only the file type.

Zero data storage

We log what happened. Never what was in it.

The event record is ten fields, by design. Your admin sees patterns and counts — “47 SSN blocks this week” — never the values behind them. Content never touches our servers.

  • You cannot breach data you do not have.
  • Employees trust a tool that provably cannot read their work.
  • SOC 2, GDPR and HIPAA audits get simpler when the model is minimal.

Stored

  • Timestamp of the event
  • Which AI tool was open
  • Which rule triggered
  • Warned or blocked
  • Hashed user id

Never stored

  • The prompt text
  • The pasted content
  • The file contents
  • The value detected
  • Any AI response
Detection rulespolicy v24
Social Security NumbersAlways on
Block
Credit Card Numbers
Block
API Keys & Tokens
Block
Email Addresses
Warn
Medical Record Numbers
Block
“Project Titan” · custom
Block

Customizable

Every rule is a toggle.

No two orgs are the same. Healthcare turns on PHI detection. A marketing team turns off email. A law firm adds keywords blocking case names.

Set warn or block per rule, scope it to specific tools, and add your own keyword or regex patterns. Changes reach every extension within the hour — no reinstall, no Web Store resubmission.

Pricing

Core protection is always free.

SSN, credit card and API key blocking is never gated behind a plan. You upgrade for scale and customization, not for safety.

Free

$0
  • Up to 5 users
  • Core PII rules
  • 3 AI tools
  • 7-day log
Start free

Starter

$6/user/mo
  • Up to 50 users
  • All built-in rules
  • All AI tools
  • 30-day log
  • Email alerts
Start free trial

Business

Popular
$12/user/mo
  • Unlimited users
  • Custom keyword rules
  • SSO + SCIM
  • 1-year log
  • Compliance export
Start free trial

Enterprise

Custom
  • Custom regex rules
  • Dedicated env
  • HIPAA
  • SLA
  • MDM deployment
Contact sales

Annual billing gets two months free.

Ship controls, not policy PDFs

Give your CISO an answer for the board.

Simple enough that an employee installs it themselves. Serious enough to say: “We have controls on AI data leakage.”