| 1. Core Zero-Trust Detection Engine |
|---|
| Sensitive PII Entity Detection Names, Emails, Phones, Addresses, Credit Cards, SSN, Passports, API Keys | General (15k) + 30 Profiles (5k Free Quota) | 30 Profiles | 30 Profiles | 30 Profiles | 30 + Custom Schema |
| Pre-Configured Industry Profiles Medical/HIPAA, Legal/Attorney-Client, DevOps/Secrets, Finance, Sales/CRM, HR, Academic | General (15k) + 30 Profiles (5k Free Quota) | All 30 Profiles | All 30 Profiles | All 30 Profiles | Multi-Org Profiles |
| 1-Click Reverse Reveal (De-anonymization) Reveal real client names & parameters from [NAME_1] in AI response output | | | | | |
| Custom Regex & Keyword Rules Builder Sanitize proprietary project codenames, internal IDs, and custom contract terms | — | Unlimited Local | Unlimited + Sync | Custom Config | Centralized MDM |
| White-Label Prompts (Zero Promotional Watermarks) Scrubbed output contains zero third-party branding or marketing trailers | — | | | | |
| 2. Multi-Environment Access & Integrations |
|---|
| Chrome Extension In-Page Floating Shield Real-time prompt scrubbing in ChatGPT, Claude, Gemini, Copilot, DeepSeek | 15k chars / prompt | Unlimited | Unlimited | — | Unlimited Fleet |
| Local Web App (Single & Bulk File Workspace) Drag-and-drop batch folder sanitization for .txt, .docx, and .csv files | Single File | 50+ Batch Files | Unlimited Batch | CLI & Scripts | Batch & Automated CLI |
| Interactive Area Snip & Screenshot OCR Select screen area to extract, scrub PII, and copy clean text to clipboard instantly | 3 Scans / Session | | | — | |
| Scanned PDF & Document Offline OCR (ZTDS™ RAM Engine) 100% offline document OCR running inside browser memory (0 byte upload) | 3 Pages / Session | | | Node Buffer OCR | |
| Local MCP Server for AI Agents & Cursor Native stdio MCP protocol for Cursor, Windsurf, Claude Code, and agent pipelines | Free Quota | | | | |
| Native Sanitized File Exports (.docx, .csv, .pssession) Download scrubbed contracts, spreadsheets, and encrypted session key backups | Copy Only | | | | |
| Zero-Metadata File Stripping (.docx, .xlsx, .pdf) Physical purge of document revision history, hidden comments, spreadsheet formulas, PDF text layers, and EXIF metadata | Single File Trial | | | | |
| Developer SDK & Headless Node.js Engine Local programmatic PII scrubbing for CI/CD, scripts, and autonomous backend pipelines | Free Quota | | | Unlimited Headless | Unlimited & On-Prem |
| 3. Zero-Trust Architecture & Data Safety |
|---|
| 100% Volatile RAM Execution (0 Network Packets) Zero cloud server proxy, zero telemetry logging, zero disk writes | | | | | |
| Airplane Mode & Offline Persistence Fully operational with disconnected Wi-Fi / air-gapped workstations | | | | | |
| Ephemeral ZTDS™ Client-Side Encryption Session token maps wiped from memory upon browser tab closure | | | | | |
| 4. Team Governance & Fleet Administration |
|---|
| Seat Allocation & Licensing Model No per-seat penalty. Add all lawyers, doctors, or engineers without surprise bills | 1 User | 1 User (3 Devices) | Unlimited ($99/mo) | Single Org Servers | Custom Scale |
| Encrypted Peer-to-Peer Team Session Handoff (Patent Pending) Share scrubbed AI outputs with colleagues via 1-click encrypted Blueprint link or QR (U.S. & Int'l Patents Pending) | — | — | | — | |
| Lock Extension Protection (Strict CISO Mode) Enforce mandatory redaction; prevent employees from turning off protection in AI tools | — | — | Blueprint Lock | — | MDM Enforced |
| Centralized Fleet Rollout (MDM / Intune / Google) Push pre-locked extension policies via Google Workspace Admin, Microsoft Intune, Jamf | — | — | GPO / Registry | NPM / CI Automation | Full MDM & Intune |
| Real-Time SIEM Streaming & Webhook Heartbeats Stream zero-PII audit heartbeats directly into Splunk, Datadog, Slack for SecOps alerts | — | — | | Optional Webhook | Syslog & SIEM |
| 5. Enterprise Compliance, GRC & Contracts |
|---|
| Cryptographic Signed Compliance Receipts Generate signed PDF receipts with SHA-256 session proof for SOC 2 & HIPAA auditors | — | 1-Click Proof | Team Receipts | SHA-256 Hashes | Automated GRC |
| 100% Air-Gapped / Defense Mandates (ITAR, CJIS) Operates completely isolated from external networks for defense & sovereign data | — | — | — | | |
| Full Source Code License & Private NPM SDK Complete source code audit rights and self-hosted SDK for internal pipelines | — | — | — | — | |
| Dedicated GRC Support & Security Questionnaires Pre-filled SIG, CAIQ, and VSA questionnaires + direct CISO architecture calls | — | Public Docs | Public Docs | Public API Docs | Dedicated GRC & Call |
| License Scope & Key Custody Boundary Clear per-tier deployment boundaries: personal devices vs team workspace vs backend nodes | Free Testing | 1 User (3 Devices) | Master Key Isolated | Backend Server Key | OEM / Air-Gap |
| Emergency Key Revocation (KRL) Instant SHA-256 hash invalidation if credentials or tokens are leaked in public code | — | 24h Support KRL | Instant KRL Rotation | Instant KRL Rotation | Fleet Key Rotation |
| Custom DPA & Corporate PO / Invoicing Enterprise Data Processing Agreements, Net 30/60 Invoicing, Wire Transfers | — | Card / PayPal | Card / Apple Pay / Wire | Card / PayPal / Wire | Custom DPA & PO Wire |
