

Data protection
The file stays on the station. The label follows it everywhere.
Most data-loss tools ask you to upload the file before they can protect it. FileGuard does the opposite. TAO reads what it must on the workstation, remembers a fingerprint, and every entitled station recognizes that file. GenGuard then refuses the paste, the drop, and the attachment. Discovery proposes the label when the content is obviously sensitive, and waits for a person when it is not.
* Ransomware protection is scheduled for the first quarter of 2027. Classification, discovery, and browser enforcement are available now.
One platform
VisionX, GenGuard, Vault, and HostGuard already share one portal and one TAO agent. FileGuard gives that agent a memory of the file itself, so a screen watch, a browser block, and a credential vault are no longer three unrelated tools.
Watches the screen. A phone or a camera pointed at a labeled document is a different exit, and VisionX is the control for that exit.
Watches the way out. Paste, drop, and attach in the browser wait until TAO says whether the file is labeled. The same keywords GenGuard already uses apply to the text inside the file.
Holds the credentials and the encrypted vault. FileGuard does not replace that store. It tells the rest of the platform which everyday files are sensitive.
Watches who is trying to sign in. FileGuard watches what is already on the disk. Together they cover the account and the file.
The same TAO agent. The same Cloud Portal. A label the browser has to respect.