For teams on Google Workspace

Keep customer data out of AI tools.

A Chrome extension your admin force-installs. It inspects every prompt, file and reply before it leaves the browser.

Your team already pastes things into ChatGPT, Claude, Gemini and 130+ other AI tools. Thrace Security allows, warns, redacts or blocks per your policy, and keeps an audit trail of every decision without ever storing the prompt itself.

Open source · Apache-2.0EU-hosted optionPrompts never stored~20-minute Workspace rollout
leaked AWS secret keyBlock
credit card numberRedact
patient NHS numberWarn
ordinary promptAllow

Decided in real time · before the prompt is sent

28
detector types
136
AI tools in the registry
4
actions: allow · warn · redact · block
0
prompts stored, by schema
How it works

Protected by this afternoon.

No security team required. If you can install a Chrome extension from the Google Admin Console, you can run Thrace.

Step 1

Install from Admin Console

Force-install the Chrome extension to your organisation from the Google Admin Console and paste one policy JSON. No agents, no proxies, no network changes.

The extension is an unlisted Chrome Web Store listing: your force-install policy adds it by ID, employees never install it themselves.

View the Web Store listing

Step 2

Set your policies

Choose what counts as sensitive (cards, IBANs, API keys, health identifiers…) and what happens per team and per AI tool: allow, warn, redact or block.

Step 3

Watch it work

The portal shows every decision as it happens: who used which AI tool, what was caught and what the extension did about it. Slack alerts for the serious ones.

Where your data goes

Inspected in memory. Never stored.

The prompt text exists only for the milliseconds it takes to decide. The database has no column for it.

In the browser

Chrome extension

Intercepts the prompt, file or reply on 136 known AI sites and sends it for a decision.

Your server or ours

Thrace API

28 detectors scan the text in memory and return one verdict: allow, warn, redact or block.

For your admins

Admin portal

Stores metadata only: who, which tool, what category was found, what happened, when.

Self-hosted: the API and portal run on your infrastructure and nothing reaches Thrace. Hosted: a dedicated instance in Frankfurt (eu-central-1), no non-EEA subprocessors.

Features

Enterprise DLP. SME price tag.

The controls big companies pay six figures for, packaged for teams of 10 to 500 on Google Workspace.

Stops leaks in real time

Prompts, file uploads and AI responses are inspected before they leave the browser, then allowed, warned, redacted or blocked per your policy.

28 detector types

Cards (Luhn-checked), IBANs, NHS and National Insurance numbers, passports, API keys, cloud credentials, private keys, connection strings and more.

Covers 136 AI tools

ChatGPT, Claude, Gemini, Copilot, Perplexity and 130+ chat, coding, image, voice and meeting tools. Optional discovery (admin-enabled) flags unlisted AI-looking sites for review.

One simple portal

Live events, user risk overview, per-team policies and Slack alerts. Built for the IT admin who also does everything else.

Prompts never stored

Only metadata is kept: what category of data was caught and what happened. The raw text your team writes is never persisted.

Native to Google Workspace

Deployed via Admin Console and tied to Workspace identity. Employees cannot uninstall it or opt out, and there is nothing for them to configure.

What gets caught

Twelve of the twenty-eight.

Each detector validates, not just pattern-matches: checksums, context words and known test values keep false positives down. You decide the action per team.

DataDetectorSeverityExample shapeDefault policy
AWS secret keyaws_secret_keycriticalAKIA… + 40-char secretWarn
Password or API key in configpassword / api_keycriticalDB_PASSWORD=…, sk-live-…Warn
Private keyprivate_keycritical-----BEGIN PRIVATE KEY-----Warn
Database connection stringconnection_stringcriticalpostgres://user:pass@hostWarn
Credit card numbercredit_cardhighLuhn-validated 13–19 digitsWarn
IBANibanhighmod-97 validatedWarn
UK NHS numbernhs_numberhighchecksum + contextWarn
UK National Insurancenational_insurancehighQQ 12 34 56 CWarn
US Social Security numberssnhigharea/group validatedWarn
Date of birthdobmedium“date of birth 14/03/1988”Log
Email addressemaillowjane.doe@acme.co.ukLog
Phone numberphonelow+44 7700 900461Log

Full list and the evaluation harness that measures precision and recall are in the open-source repository. Custom keywords (project names, client lists) can be added per policy.

The portal

See every AI decision. Store no secrets.

Live events, weekly trends, per-user risk and per-team policies in one place. Raw prompts are never stored: your employees’ words stay theirs.

Illustration. Figures are examples.

acme.getthrace.com
1,284
prompts scanned
37
leaks stopped
212
files inspected

Latest events

10:42m.ivanova@ · ChatGPT · credit cardBLOCK
10:31p.georgiev@ · Claude · customer emailREDACT
10:12s.dimitrov@ · Gemini · phone numberWARN
09:58k.petrov@ · Copilot · clean promptALLOW
Trust

Built to pass your security review.

Open source, forkable

The whole platform is Apache-2.0. Read the detector code before you trust it.

Prompts never stored

The events table has no column for prompt text. This is enforced by schema, not by promise.

EU hosting

Hosted instances run in Frankfurt (eu-central-1) with no non-EEA subprocessors.

Minimal permissions

identity, storage, tabs, alarms and a fixed list of AI hosts. No access to every website.

Runs inside your Workspace policy

Configured from the Google Admin Console. The extension key is scoped: it cannot read or change policies.

Security disclosures welcome

security@getthrace.com, acknowledged within two business days.

Pricing

Same product. Two ways to run it.

Run the open-source platform yourself for free, or let us run a dedicated instance for you in the EU.

Self-hosted

For teams with an engineer to spare

€0

Free forever · Apache-2.0

  • Full platform, no locked features
  • Docker Compose or AWS Terraform
  • Your data never leaves your systems
  • Community support
Read the deployment guide

Enterprise

For 500+ seats or special requirements

Let’s talk

custom agreement

  • Dedicated instance and region of your choice
  • Data processing agreement and DPIA support pack
  • Google Workspace SSO today; SAML on request
  • Priority support
Contact sales

Prices in EUR, excl. VAT. Hosted pricing is being finalised; early-access partners keep their rate.

Self-hostedHostedEnterprise
Where it runsYour servers (Docker or AWS)Dedicated instance, FrankfurtDedicated instance, your region
Portal addressYour own hostnameyourcompany.getthrace.comYour own domain
UpgradesYou pull and redeployDone for youScheduled with you
BackupsYour responsibilityDaily, 7-day retentionPer agreement
Data locationWherever you run itEU onlyYour choice
SupportCommunity (issue tracker)Email, 1 business dayPriority
Price€0from €4 / user / monthCustom

Same detectors, same portal, same extension in every option. Move between them any time: the database exports and imports cleanly.

FAQ

Fair questions.

Do you store what my employees type?
No. Prompts are inspected in memory to make an allow/warn/redact/block decision, then discarded. The database stores metadata only: which category of sensitive data was found (e.g. “credit card”), what action was taken, which app, who, and when.
What does the extension see?
It runs only on a fixed list of 136 known AI sites. There it reads the prompt being submitted, files being uploaded and, if you enable it, the AI’s reply. It does not run on, read, or modify any other website.
How long does deployment actually take?
Self-hosted: an afternoon for one engineer following the deployment guide (a VM, Docker, a hostname). Hosted: we provision your instance; your admin then spends about 20 minutes in the Google Admin Console force-installing the extension and pasting one policy JSON.
Where does the extension come from, and do employees have to install it?
From an unlisted Chrome Web Store listing, ID dolfalcbdapdlpejjficgkolpghgjpdk. Unlisted means it does not appear in store search: your Google Admin Console force-install policy installs it by ID and Chrome keeps it updated from the store. Employees install, enable and update nothing. View the listing.
Which AI tools are covered?
ChatGPT, Claude, Gemini, Copilot, Perplexity and 130+ others across chat, coding, image, voice and meeting tools. The registry is a file in the open-source repo; add a tool and ship it with the next extension release.
Where is data hosted?
Self-hosted: wherever you run it; nothing reaches Thrace. Hosted: a dedicated instance in Frankfurt (eu-central-1) with no non-EEA subprocessors.
Can we self-host now and move to hosted later, or the other way round?
Yes. It is the same software. The database is standard PostgreSQL and exports cleanly in both directions.
Does it work outside Chrome?
No. Thrace covers Chrome deployed through Google Workspace, which is where the large majority of workplace AI usage happens. Other browsers are not supported.

Your data is in ChatGPT already.

The question is whether anything is watching. Put Thrace between your team and 136 AI tools. Self-host it today for free, or ask for a hosted instance in the EU.