How it works
Three parts. One machine.
Everything happens on the computer in front of you. The only thing that ever reaches the AI is a prompt with the sensitive values already swapped out.
You type
In ChatGPT, Claude, Gemini or six other AI sites
Kwame MensahExtension
Holds the send before it reaches the site
Send heldCompanion
Detect, select, regenerate on localhost:7731
Adwoa BoatengCloud AI
Answers normally. Never sees the real values.
Useful answerInside the companion
One prompt, three passes.
Here is a single prompt followed through the engine. Every pass is a rule you can inspect, not a black box, so you can always explain why something was caught.
Detect
Every candidate is found and scored.
Our branch is in Accra. Kwame Mensah, account GH1234567890123, owes GHS 48,500.
Select
Low-risk values are only swapped next to something sensitive.
Our branch is in Accra. Kwame Mensah, account GH1234567890123, owes GHS 48,500.
Accra is kept: it stands alone in its sentence, so it identifies no one.
Regenerate
Each value becomes a realistic stand-in of the same shape.
Our branch is in Accra. Adwoa Boateng, account GH6015931206899, owes GHS 48,500.
The same name maps to the same stand-in throughout the prompt. Nothing is kept once the request ends.
The parts
What you install.
Companion app
A signed desktop app that lives in your system tray. A one-time wizard takes your name and licence, then it runs the detection engine as a local service. Nothing listens on the network unless you choose to deploy it centrally.
Browser extension
A Chrome and Edge extension that attaches to the prompt box on supported AI sites. When you press Enter it pauses the send, cleans the draft through the companion, then lets the real send go.
Detection engine
Microsoft Presidio for universal patterns, plus a Ghana banking pack for local formats. Deterministic by design: every catch traces back to a rule, not a model weight.
Audit log
Every scan appends one JSON line with types, counts, platform and timing. Original values are salted and hashed, so the log is safe to forward to your SIEM and useless to anyone who steals it.
Data flow
What leaves your machine.
Short list. We checked the code, not the brochure.
The cleaned prompt
Sent to the AI site you were already using. Sensitive values are stand-ins by then.
Your activation code, once
Only if you choose online activation, to fetch your signed licence from us.
Your original prompt
Never. It is cleaned before the send is allowed through.
The real names, accounts and IDs
Never. Swaps happen in memory and nothing is kept after the request.
Your audit log
Never. It stays on disk locally, and it only holds hashes anyway.
Up and running in minutes.
Extract, run, activate, load the extension. No server to stand up.