Anomity Browser Sensor is installed by your employer to detect accidental disclosure of secrets and sensitive data into AI services. It runs only on a list of AI sites, never on the rest of the web. Data is sent only to your employer's Anomity tenant, which Anomity processes on your employer's behalf.

What is sent: the name and severity of any pattern that matched, how the text arrived (paste or typed) and the action taken; a masked fragment of the match (at most its first 8 and last 4 characters, never more than about 40% of it, nothing for values of 6 characters or fewer); any protected word your employer defined that you entered; the domain of the AI site and when you visited; the email of an account you sign in to on an AI site; the extensions installed in your browser (name, ID, version, permissions), only while you leave "technical and interaction data" on; file name, size, type and a hash of the first 4 KB of files you upload to an AI site; browser type and version, extension version and a random install ID; event timestamps.

What is never sent: the matched secret or personal-data value; anything you typed or pasted that did not match; the text of your prompts; conversations or AI responses; the contents of uploaded files beyond that hash; cookies, page contents or any data from non-AI sites; browsing history outside the AI site list.

Audit entries are kept for 90 days; other data while your employer uses Anomity. To access or delete your data, contact your employer's privacy team; Anomity helps them answer. Full policy: https://anomity.ai/legal/privacy-policy/