Masking: paste, attach, send and keep context
Policy > Masking: what the extension does when people paste, attach or send, who gets keep context, and which document formats are allowed.
Under Policy > Masking you choose what the extension does when people paste, attach and send, and whether they read the AI's answer with the real values put back. Each function has its own setting; manual masking is always possible. What the employee sees is in Masking when you paste, attach or send, and keep context.
Masking in the dashboardPer function the setting in the extension, and per tool whether it deviates.The four settings
For each function you pick one of four settings under In the extension. By default every function is Available, for everyone.
| Setting | What the employee sees |
|---|---|
| Off | The feature is off and does not appear in the extension. |
| Available | A switch that is off; the employee turns it on. |
| On by default | The switch is on; the employee can turn it off. A choice made earlier stays. |
| Always on | The switch is on and locked, with "Set by your organisation". |
The employee finds the switches in the extension under When to mask and Keep context.
Mask on paste
"Pasted text goes through detection first and then into the field." The employee sees what was found ("3 sensitive details found in what you paste") and picks Paste masked, Paste original or Cancel. Nothing found: the text is pasted as it was. No answer from detection: the employee decides. Formatting is dropped. Works in ChatGPT, Claude, Gemini and Copilot on copilot.com.
Under When pasting you choose how that goes:
| Choice | What happens |
|---|---|
| User chooses | The user chooses: paste masked, paste the original or cancel. With "From now on paste masked right away" they skip the check from then on. |
| Always show the check | That check every time, with no way to skip it. |
| Always paste masked | Whatever is found always goes into the field masked. Pasting the original is not possible. |
Why paste has its own function: ChatGPT sends the draft along while someone is still typing. For pasted text, masking on send comes too late.
Mask on attach
A file added to a conversation in ChatGPT or Claude, through the upload button, by dragging or by pasting, is held first: "File held by BeeSensible". The employee picks Check and mask (the file goes to the Documents panel of the side bar and is added from the result card), Add the original or Cancel.
This function needs the Documents module. With More file formats for documents on, it holds every format BeeSensible can check; other file types pass unchecked. It does not work in Gemini.
Mask on send
"Highlighted data still in the message when sending is masked first." On Enter or the send button, everything still found becomes a placeholder, and then the message goes. If the last keystrokes are still being checked, the extension waits at most two and a half seconds ("BeeSensible is checking your message") and then lets the message through as it stands. A language ("English") is never masked automatically, because in a prompt it is usually the instruction. These masks count as masked in the figures.
Keep context
"The extension puts masked values back into the answer, only on the user's screen. The AI tool sees placeholders." Restored values get a dotted underline. Besides the setting, you choose two things here:
Keep context
| Setting | Choice |
|---|---|
| Who gets it | Admins only: only admins get the feature, to try it yourself first. Everyone: everyone in your organisation gets the feature. |
| Memory | Browser session only: the memory is cleared when the browser closes, on sign-out, or after a day. 30 days: the memory is encrypted on the device and disappears after 30 days without use or on sign-out. |
The memory stays on the device and never reaches BeeSensible. Works in ChatGPT, Claude, Gemini and Copilot on copilot.com; not in Microsoft 365 Copilot and not in the desktop app.
More file formats for documents
"Besides PDF, also Word, Excel, PowerPoint, OpenDocument, RTF, plain text, scans and images. Each file comes back in the same format." Under For your organisation you pick On (everyone can anonymise these formats, in the dashboard and in the extension) or Off (only PDFs can be anonymised). It is on by default. The desktop app handles PDF only. See Documents.
Deviating per tool
Under each function you see whether a tool deviates: "Applies to every tool; no tool deviates", or "Deviates for:" followed by the tools. You deviate on the Policy tab of ChatGPT, Claude or Gemini in the AI register; each feature follows the organisation there unless you deviate. Who keep context applies to stays a choice of the organisation, also with a deviation. See Policy per tool.
What else holds
- Every change on this page lands in the audit log.
- The extension picks up the settings within five minutes.
- Which data gets masked is decided by the app's detection profile.
