CompliTru AI Governance

About

CompliTru scans every prompt in real-time before it is sent to an AI tool. When sensitive data is detected, the prompt is blocked before it reaches the provider. You see exactly what was found, choose to block or allow, and every decision is logged.

No proxy. No VPN. No network changes.

WHAT IT DETECTS

Credentials and Secrets:
- AWS access keys and secret keys
- API keys and tokens from major AI and SaaS platforms
- Private keys, certificates, and database connection strings
- Bearer tokens, OAuth tokens, and plaintext passwords

Personally Identifiable Information:
- Social Security Numbers
- Credit card numbers and bank account numbers
- Email addresses and phone numbers

Protected Health Information:
- Medical record numbers and patient identifiers
- Dates of birth associated with patient records

Infrastructure:
- Internal and private IP addresses

Image Scanning:
- OCR-based detection of sensitive data in uploaded images
- Scans screenshots, photos of documents, and pasted images before upload

20 detection patterns across 4 categories. Enterprise customers can add custom patterns for organization-specific data.

HOW IT WORKS

1. You type or paste into any supported AI tool
2. A warning banner appears if sensitive data is detected
3. When you submit, the prompt is intercepted before it reaches the network
4. A blocking modal shows what was detected with severity ratings
5. You choose to block or allow
6. If no action is taken, the prompt is automatically blocked after 5 minutes
7. Every detection and decision is logged

The prompt cannot reach the AI provider if blocked.

FREE VS ENTERPRISE

Free:
- Real-time detection and blocking
- All 20 detection patterns
- Image OCR scanning
- Local detection only, nothing leaves your browser

Enterprise (via complitru.ai):
- Centralized governance dashboard
- Team-wide visibility across all employees
- Slack and Microsoft Teams alerts
- Audit trail export
- Compliance mapping for SOC 2, HIPAA, PCI-DSS, NIST, and GDPR
- Custom detection patterns
- Policy enforcement and admin-push deployment

PRIVACY

All detection happens locally in your browser. No data is stored or transmitted unless you connect to the optional enterprise dashboard.

COMPLIANCE

Detection patterns map to SOC 2, HIPAA, PCI-DSS, NIST 800-53, GDPR, and CCPA controls.

Visit complitru.ai for enterprise features.