PromptShielder
Security architecture

Nothing to breach, because nothing is stored.

PromptShielder is a browser-only tool. All detection, token mapping, and demasking run inside your local browser session. We have no backend database that holds your text. No prompt ever leaves the device on its way to us — because it never touches us in the first place.

How the data flows

Your original data stays on the left. Only masked text crosses to the AI provider.

Your browser

Original data lives here

  • Raw prompt
  • Token dictionary
  • Local session memory
Masked text only

AI provider

ChatGPT · Claude · Gemini

  • [NAME_1]
  • [EMAIL_1]
  • [ACCOUNT_1]
PromptShielder servers: not on this diagram. Your prompt text never reaches them.

The five architectural facts

Detection runs locally

All regex extraction and PII detection execute inside your browser tab. No text is sent to our servers for scanning.

No backend database

We do not store your prompts, redacted output, or token dictionary on any server. There is no user-content table to breach.

We physically cannot read your text

Because your prompts never leave the browser session, we have no operational or technical way to see the content you process.

Token dictionary is session-local

The mapping between tokens and original values lives only in your active browser tab. It is not synced, uploaded, or persisted server-side.

Panic wipe and session end clear everything

Closing the tab or triggering Panic Wipe drops the dictionary and clipboard state. Nothing survives the session.

What this means for your reviewers

  • • Security: no server-side attack surface for prompt content — there is nothing to exfiltrate from us.
  • • IT / procurement: no data-processing agreement is needed for prompt text, because we never process it.
  • • Legal / compliance: PII flow to AI providers is limited to masked tokens; reviewable and documentable.

PromptShielder supports your compliance program. It does not, by itself, guarantee compliance with any specific regulation.

Questions from your IT team?

Send them this page.