GenGuard endpoint clipboard DLP (TAO)
How TAO blocks GenGuard keywords on desktop apps via clipboard gating — separate from the browser extension.
GenGuard endpoint clipboard DLP (TAO)
Browser GenGuard and TAO endpoint clipboard DLP share the same DLP keywords and Live Events stream, but they enforce in different places.
| Surface | Who enforces | What it covers |
|---|---|---|
| Browser (GenGuard extension) | Chrome / Edge extension (+ TAO native bridge when enrolled) | Web pages, in-browser paste, domains, categories |
| Endpoint (TAO) | Windows session helper (TAO 4.0.3519+) | Clipboard text matching keywords while a target desktop app is focused |
What the endpoint gate does
When Browser DLP is entitled and enabled, and at least one keyword is configured:
- TAO watches the foreground process on Windows.
- If the process is in the curated list (Cursor, WhatsApp, Codex, Claude, ChatGPT, Windsurf, Warp, and similar) or an extra name you added under Endpoint apps, TAO inspects clipboard text.
- If the clipboard contains a blocked keyword, TAO clears the clipboard (so paste into that app cannot carry the match) and uploads a Live Event with
source: endpointandaction: clipboard_block(URL likeapp://cursor.exe).
Web filtering, category blocks, and in-page paste in the browser stay with the GenGuard extension. This MVP does not block file attach or drag-and-drop into desktop apps.
Configure extra apps
In Security Policies → GenGuard (or Policies → GenGuard), use Endpoint apps (TAO) to add process names such as Slack.exe. Curated AI/chat apps are always covered when Browser DLP is on; the list is additive.
After save, the next TAO policy refresh writes browserDlp.endpointApps and updates %ProgramData%\Trustity\TAO\browser-dlp-policy.json.
Validate
- Save a distinctive test keyword (not a real secret).
- On a Windows endpoint with TAO 4.0.3519+ and Browser DLP entitled, open Cursor (or another target app).
- Copy text containing the keyword, then focus the target app (or copy while it is focused).
- Confirm the clipboard is cleared and GenGuard → Live Events shows an Endpoint badge.
Uploads use the same GenGuard outbox as extension violations and are not gated by the portal heartbeat interval.