Aegis AI Guard
Privacy Notice
Last updated July 16, 2026
This notice explains how Aegis AI Guard processes information in the browser extension, dashboard, and supporting services. An organization deploying Aegis may be the controller of its workforce or family account data, while Aegis acts as its service provider.
What Aegis processes
The browser extension analyzes prompt text locally to identify policy and safety risks. By default, Aegis sends the backend a SHA-256 prompt hash, prompt length, risk score, findings, platform name, enforcement actions, timestamps, and limited browser metadata. Prompt plaintext is not stored unless an organization explicitly enables that policy.
Extension permissions
Aegis runs on the supported ChatGPT, Claude, Gemini, and Microsoft Copilot sites so it can inspect a prompt before submission and show the policy panel. Storage keeps settings, encrypted session credentials, policy data, and a bounded event retry queue. Alarm permission supports policy refresh and reliable event delivery. Optional backend host access is requested when an administrator connects the extension.
Accounts and processors
Supabase provides authentication and database services. Vercel may host the dashboard and API. A privacy-filtered Sentry configuration may receive Aegis-owned application errors; prompts, authentication tokens, email addresses, URL query strings and fragments, and third-party page breadcrumbs are excluded.
Retention
The default retention period is 90 days for prompt events and security alerts and one year for audit logs. Organization administrators can preview and apply retention cleanup. Backups may persist for a separate, limited provider backup window and are not used as active product data.
Your choices and rights
Depending on your location, you may request access, correction, export, deletion, restriction, or objection. Organization administrators can export tenant data, remove accounts, anonymize deleted-member event snapshots, and submit reviewed organization-deletion requests. Contact your organization administrator or the support channel identified in your Aegis agreement.