Security at Brightrail
You're trusting us with a view into your organization. Here's exactly what we access, what we keep, and how we protect it.
How checking works
The browser extension checks what people send to AI tools on their own computer. Only the result reaches us: what kind of thing was caught, in which tool, and when. When something is caught, we keep a short masked sample around it, and every time it's opened is recorded.
What we ask Google for
Information about users on your domain, which apps they've connected, audit reports, your organization units, and Chrome browser policies. One of these would technically let an app remove other apps' access. Google doesn't offer a read-only version of it. We only read, and never change or remove anything.
The Chrome policy permission is the one we write with, and only when you click “Install for all employees”. We then set exactly one thing: the Brightrail extension is installed for your whole organization, with the settings it needs to check in. We change no other Chrome policy. You can remove the extension at any time in Google Admin.