![D[AI]NGEN](/brand/logo-dark.png){kind=logo}
An employee may legitimately be authorized to access enterprise information. That does not automatically mean every AI application or agent used by that employee should inherit the same authorization.
D[AI]NGEN is being built around that distinction.
What D[AI]NGEN is designed to do
D[AI]NGEN introduces a separate security boundary between enterprise data and AI.
The public product model treats AI access as a distinct decision context rather than an automatic consequence of user access.
The public conceptual flow is: Enterprise Data → D[AI]NGEN → Context / Policy → Decision → AI
Possible conceptual decision outcomes are:
- ALLOW
- REDACT
- DENY
These terms describe the public security model. They do not imply that every underlying mechanism is currently a verified shipping capability.
Canonical access model
The Windows user keeps their normal access rights. Each AI application receives its own independent and more restricted access scope.
The AI application may reach its authorized Workspace and explicitly approved resources. Everything else in the user’s data scope remains inaccessible to that AI application by default.
Approval for one AI application does not automatically transfer to another AI application.
This is the canonical product access model. Public claims about exact enforcement coverage remain aligned with current validated product state.
Discovery and administrative authority
Discovery & Classification surfaces AI-relevant files, folders, categories, and sensitivity signals locally, then places what needs attention into an administrator review flow.
Discovery recommends. Admin decides. Policy applies.
Discovery does not grant access by itself, and employees cannot independently expand an AI application’s scope.
Endpoint and central administration
D[AI]NGEN has validated an initial central-management foundation in which administrative intent can be sent to an enrolled endpoint and applied locally.
The endpoint remains responsible for the local filesystem reality and enforcement state. Central administration can receive the safe metadata and product evidence required for review.
Current product surfaces
D[AI]NGEN currently has two product surfaces:
- Browser Extension — current product surface, available through private access
- Desktop — packaged release available for qualified deployments; technical maturity remains Preview
Both product surfaces are built around the same principle: AI access should be evaluated separately from user access.