D[AI]NGEN Desktop — Packaged release launched October 21, 2026 · Available for qualified deploymentsRequest Installation →

ENTERPRISE AI USE CASES

What happens when enterprise data meets AI?

Employees already have access to the information they need to do their jobs.

D[AI]NGEN introduces a separate decision before selected enterprise data becomes AI-accessible data.

Explore how that boundary applies to current validated Browser workflows, Desktop Preview scenarios, and future AI surfaces.

VALIDATED

Current evaluated product behavior within a defined public scope.

PREVIEW

Windows Desktop behavior validated at Preview maturity; Desktop is available through custom assisted installation.

NEXT 90 DAYS

Planned B2B productization and administrator workflows; not presented as currently generally available.

ADVANCED DEVELOPMENT

Usage and cost governance includes implemented components, while live provider integration and end-to-end enforcement remain under validation.

ILLUSTRATIVE SECURITY SCENARIO

A problem-space example; not a claim that every shown resource is classified automatically.

CURRENT · VALIDATED CORE

Browser + governed Desktop workflows

Administrators control which AI applications and models may be used.

An employee can be authorized to do their job while an unapproved AI application or model is not treated as available within the governed workflow.

Administrator-controlled policy defines which supported AI application or model may be used by the employee or endpoint.

Approval remains AI-specific: Claude approved does not mean Gemini approved, and Gemini approved does not mean ChatGPT approved.

EMPLOYEE / ENDPOINT
ADMIN POLICY
APPROVED AI / MODEL
UNAPPROVED AI UNAVAILABLE

Scoped to supported governed Browser/Desktop workflows. This does not claim control over every AI model, provider, or unmanaged environment.

VALIDATED BROWSER SCENARIO

Browser Extension

A finance analyst sends a working file to an AI assistant.

An employee is authorized to work with an internal finance file.

They select that file in a validated Browser AI workflow.

Without a separate AI-access boundary, user access can effectively become AI access.

With D[AI]NGEN, the file enters the evaluated D[AI]NGEN flow; supported content can be inspected before the AI receives it; configured findings can influence the resulting decision; and the workflow can proceed, redact supported content, request confirmation, or stop.

EMPLOYEE · AUTHORIZED
FINANCE FILE
D[AI]NGEN · REVIEW BEFORE SEND
ALLOW · REDACT · ASK FIRST · BLOCK
AI WORKFLOW

The user remains authorized to work with the source data. The AI interaction receives a separate decision.

This describes current validated behavior for supported Browser workflows and supported content. It does not imply universal file-format or provider coverage.

VALIDATED BROWSER SCENARIO

Browser Extension

Sensitive text should not automatically travel with the user.

A user selects a supported text file containing information that matches configured sensitive-content patterns.

D[AI]NGEN can evaluate the supported content before the AI workflow receives it.

Where configured and validated, a redacted copy may be produced instead of sending the original content unchanged.

ORIGINAL TEXT
D[AI]NGEN
SUPPORTED FINDINGS
REDACTED COPY
AI WORKFLOW

This is limited to configured sensitive-content patterns in supported content. Broader document and PDF redaction remains later product direction.

VALIDATED BROWSER SCENARIO

Browser Extension

Unknown does not have to mean silently allowed.

An employee selects a file format that the evaluated inspection path does not analyze.

D[AI]NGEN can identify the file as unanalyzed within the evaluated flow and require an explicit send decision rather than silently treating the file as inspected.

PDF and XLSX are examples from the evaluated scope. The file can be recognized as unanalyzed; this is not a DLP inspection claim for that format.

FILE SELECTED
SUPPORTED? · NO
UNANALYZED
EXPLICIT DECISION

Recognizing an unsupported format is not the same as inspecting its contents.

SECURITY BOUNDARY SCENARIO

Illustrative scenario

The employee can access more than the AI should receive.

An employee may have legitimate access to multiple internal resources.

Only part of that information may be appropriate for the AI workflow being used.

D[AI]NGEN separates user authorization from AI authorization.

USER ACCESS

Finance
Projects
Customer files
Internal resources

AI ACCESS

Explicitly approved interaction only
USER ACCESS
D[AI]NGEN
AI ACCESS

Resource categories are illustrative. This does not imply automatic classification of every resource category.

DESKTOP PREVIEW

Desktop · Windows

A desktop AI application should not inherit the user’s entire filesystem.

A user needs a desktop AI workflow to work with selected local resources while retaining their normal access.

Instead of treating all files accessible to the employee as available to AI, the current Windows Preview can establish an authorized Workspace containing selected resources.

In the current Preview, Claude Desktop receives only the authorized Workspace. Protected-session behavior, readiness checks, and recovery have been exercised in the current evaluation environment.

USER FILESYSTEM

Finance
Project A
Contracts
Personal working files

CURRENT PUBLIC EXAMPLE

Claude Desktop
USER FILESYSTEM
SELECTED RESOURCES
AUTHORIZED WORKSPACE
D[AI]NGEN DESKTOP
DESKTOP AI WORKFLOW

Current Windows Preview only. This is not a universal endpoint-isolation or filesystem-security claim and does not change Desktop availability.

VALIDATED PLATFORM BEHAVIOR

Platform

A security decision should leave a useful record.

Within evaluated flows, a D[AI]NGEN decision can produce a record describing the decision without reproducing the detected secret content itself.

This helps teams review product behavior, understand evaluated decisions, and support product or security evaluation.

EVALUATED FLOW
D[AI]NGEN DECISION
DECISION RECORD
PRODUCT / SECURITY REVIEW

This is a narrow record behavior, not a claim of complete auditability, SIEM integration, enterprise log management, or compliance reporting.

IN DEVELOPMENT

Coverage expansion

AI is moving into developer workflows.

Developer AI tools create the same underlying authorization question: should an AI coding workflow inherit everything the developer can access?

D[AI]NGEN coverage for these tools is still in development. They are not described as protected today.

DEVELOPMENT TARGETS

Cursor
Microsoft Copilot
Qwen
DEVELOPER ACCESS
AI CODING WORKFLOW
SEPARATE AUTHORIZATION QUESTION

Development coverage does not establish a current protection claim.

PRODUCT MODEL · DESKTOP PREVIEW

Desktop · Windows

Each AI application receives its own Workspace boundary.

A user can access Project A, Project B, Finance, and Contracts through their normal Windows permissions.

In the product model, Claude can receive Project A only. Gemini and ChatGPT are not automatically approved for the same resource.

Everything else remains unavailable to that AI application by default while the user keeps normal access.

USER CAN ACCESS

Project A
Project B
Finance
Contracts

CLAUDE RECEIVES

Project A only

OTHER AI APPLICATIONS

Gemini: not automatically approved
ChatGPT: not automatically approved
USER RIGHTS PRESERVED
ADMIN APPROVES CLAUDE
PROJECT A WORKSPACE
OTHER AI DENIED BY DEFAULT

Product model shown through the current Desktop Preview. This does not imply global provider support or universal endpoint coverage.

NEXT 90 DAYS

Product direction

An employee can request additional AI access, not grant it.

An employee needs Claude to access a project folder for two hours.

The employee requests access. The administrator reviews the exact resource or Workspace, selects Claude, chooses two hours, and approves or refuses.

When temporary access expires, the intended product behavior is to return access to the prior state.

USER REQUEST
ADMIN REVIEW
CLAUDE
PROJECT SCOPE
2 HOURS
POLICY APPLIED
PRIOR STATE RESTORED

This is a next-90-day B2B product-direction flow. It is not labeled as currently generally available.

VALIDATED · LIMITED SCOPE

Discovery & Classification

Discovery can recommend. It must not authorize.

An administrator runs a local scan or re-scan to surface AI-relevant files, folders, and sensitivity signals.

The module groups results by review state, including items needing review or awaiting decision.

No recommendation becomes access until the administrator approves it and the resulting policy is applied.

DISCOVERY / SCAN
RECOMMENDATION
ADMIN DECISION
POLICY
ENFORCEMENT / EVIDENCE

The visible module is review-oriented. It does not claim autonomous authorization, universal classification coverage, or automatic enforcement.

NEXT 90 DAYS

Enterprise administration

Group policies and exceptions stay administrator-managed.

A Finance employee may receive a different AI application or Workspace policy than an Engineering employee.

The planned workflow lets an administrator define a group policy, add an individual exception, apply it to governed endpoints, and review the resulting state.

Endpoint-by-endpoint support can come first; fleet-scale orchestration remains a later platform expansion.

GROUP POLICY
INDIVIDUAL EXCEPTION
ADMIN APPROVAL
POLICY APPLIED
ENDPOINT STATE / EVIDENCE

Planned B2B administrator workflow. It does not imply enterprise fleet orchestration is available today.

ADVANCED DEVELOPMENT

Platform module · advanced development

AI usage and cost governance is moving into product validation.

AI creates two enterprise risks: sensitive-data exposure and uncontrolled usage or cost.

D[AI]NGEN already has implemented usage/cost components alongside the current authorization-boundary product.

Implemented components include token measurement from supported provider usage data, per-workstation attribution, calculated costs, budgets, alerts, and spending limits.

AI USAGE
VISIBILITY
ATTRIBUTION
BUDGET / ALERT / QUOTA

Advanced development only: live provider integration, organizational attribution, alert delivery, and end-to-end spending enforcement remain to be confirmed. This does not claim universal browser-chat token monitoring or audited provider billing.

See the boundary in the workflows you evaluate.

Review the current Browser product, scoped validated behavior, and Desktop Preview direction with D[AI]NGEN.