![D[AI]NGEN](/brand/logo-dark.png){kind=logo}
Browser Extension
The current Browser product includes validated workflows with selected AI services and scoped file-review behavior.
AI Coverage
ChatGPT · Claude · Gemini · Google AI Mode
WHY D[AI]NGEN
AI changed the meaning of access.
Enterprise security already controls what users, devices, applications, and services can access.
AI adds a separate control-layer question: which AI applications and models should this employee or endpoint be allowed to use?
Should the AI workflow receive the same information the user is authorized to access?
Over time, the platform direction also answers how much AI is consumed and what it costs. D[AI]NGEN exists to make these decisions explicit.
Access decision
USER ACCESS
What can the user access?
D[AI]NGEN
AI authorization boundary
AI APPLICATION & DATA ACCESS
Which AI applications and models are allowed, and what can THIS AI access?
THE GAP
User authorization was not designed to answer AI authorization.
Traditional access systems can correctly determine that an employee may open a file, workspace, customer record, or internal resource.
But that decision does not automatically answer whether an AI service, agent, or desktop AI workflow should receive that same data.
Without a separate boundary, user access can become AI access by implication.
D[AI]NGEN introduces a distinct decision between the two.
A CONCRETE EXAMPLE
One employee. One document. Two permissions.
An employee may be allowed to open an internal financial document.
That does not automatically mean an AI service should receive the same document.
USER
AUTHORIZED
D[AI]NGEN
THE BOUNDARY BETWEEN THEM
AI
SEPARATE DECISION REQUIRED
Three questions. Three control layers.
USER ACCESS
What can the user access?
AI APPLICATION & DATA ACCESS
Which AI applications and models are allowed, and what can THIS AI access?
AI USAGE & COST GOVERNANCE
ADVANCED DEVELOPMENTHow much AI is being consumed, where, and at what cost?
D[AI]NGEN creates the boundary between user authorization and AI authorization — with usage and cost governance now in advanced development.
AI-SPECIFIC AUTHORIZATION
Access belongs to the AI application, not to AI in general.
The Windows user keeps their normal access rights. D[AI]NGEN does not remove or reduce the employee’s ordinary permissions.
Each AI application receives its own independent and more restricted access scope. It may reach its authorized Workspace and explicitly approved resources.
Everything else in the user’s data scope remains inaccessible to that AI application by default.
Claude approved ≠ Gemini approved. Gemini approved ≠ ChatGPT approved.
Finance.xlsx
USERAUTHORIZED
ClaudeAPPROVED
GeminiNOT AUTOMATICALLY APPROVED
ChatGPTNOT AUTOMATICALLY APPROVED
Each AI application receives its own access scope.
ADMIN-CONTROLLED ACCESS
The employee can request. The administrator decides.
D[AI]NGEN is designed so employees cannot independently expand an AI application’s access scope.
Administrators define or approve which AI application receives access, which resource or Workspace is shared, whether a recommendation is accepted, and where applicable how long access should remain active.
ADMIN
DECISION AUTHORITY
- Configure the endpoint
- Review Discovery
- Approve or refuse
- Define AI access
EMPLOYEE
USER RIGHTS PRESERVED
- Use files normally
- Use AI within the approved scope
- Request additional access
- Cannot expand AI access alone
D[AI]NGEN
APPLIES THE BOUNDARY
- Discover
- Recommend
- Apply policy
- Block and evidence
D[AI]NGEN discovers, recommends, applies, blocks, records, and proves. The administrator remains the authority for access decisions.
DISCOVERY & CLASSIFICATION
Discovery turns findings into reviewable recommendations.
Discovery surfaces AI-relevant files, folders and sensitivity signals locally, then places what needs attention into an admin review flow.
Discovery is a decision-support layer. It does not replace administrator approval or enforcement.
Discovery recommends. The admin decides. Nothing is applied automatically.
ADMIN CONTROLS THE SCAN
LOCAL SCAN
Scan and re-scan AI-relevant files and folders inside the governed environment.
RESULTS BY REVIEW STATE
Results group unchanged, removed, needs-review, and awaiting-decision items.
CATEGORIES & SIGNALS
Categories
Sensitivity signals
Awaiting decision
Discovery recommends. The admin decides. Nothing is applied automatically.
D[AI]NGEN is not a replacement for enterprise security controls.
Identity systems decide who the user is and what the user may access.
Data-security systems help organizations understand and protect sensitive information.
Endpoint controls protect devices and operating environments.
D[AI]NGEN addresses a different decision: what an AI workflow should be allowed to receive from the user’s authorized environment.
IAM
What can the user access?
DATA SECURITY
What information requires protection?
ENDPOINT SECURITY
What is happening on the device?
D[AI]NGEN
What can THIS AI application access?
An approved access boundary before AI reads company data.
Discovery proposes useful configuration; it does not grant access.
The administrator decides which AI application may reach which Workspace or approved resource.
The resulting AI-specific boundary is then applied, and product evidence makes the resulting behavior reviewable.
DISCOVERY / SCAN
RECOMMENDATION
ADMIN DECISION
POLICY
ENFORCEMENT / EVIDENCE
SCAN RECOMMENDS
ADMIN DECIDES
POLICY APPLIES
TODAY
This is already more than a security thesis.
Desktop
The functioning Windows Desktop Preview applies the same access-boundary principle to selected local resources through an authorized Workspace.
Availability
CUSTOM INSTALLATION
The boundary is implemented, not only described.
The core access model has been exercised across Browser workflows and a Windows Desktop Preview, including AI-specific Workspace access and centrally initiated endpoint control.
Current validation remains scoped to the evaluated environments and does not imply universal production coverage.
PRODUCT TRUTH
Security claims should be narrower than product ambition.
D[AI]NGEN distinguishes between conceptual models, implemented behavior, validated behavior, and public product claims.
A capability is not presented as universal simply because one workflow has been demonstrated.
- Conceptual models
- Implemented behavior
- Validated behavior
- Public product claims
CONCEPTUAL
IMPLEMENTED
VALIDATED
PUBLIC CLAIM
AI adoption creates three enterprise control decisions.
WHICH AI
Administrators control supported AI application and model availability within governed environments.
WHAT DATA
AI access remains separate from user access; each AI application receives its own approved scope.
HOW MUCH
Usage and cost governance is in advanced development: supported-provider token measurement, per-workstation attribution, calculated cost, and budget/alert/spending-limit components are implemented, with live validation still in progress.
AI is entering workflows faster than access models were designed to change.
Employees increasingly use AI inside ordinary work:
The security question is no longer only whether the employee may access the data. The organization also needs to decide what the AI workflow should receive.
These are examples of the broader problem, not a claim that every listed use case is currently protected by D[AI]NGEN.
- reviewing documents;
- working with project files;
- asking questions about enterprise information;
- using AI-assisted development tools;
- interacting with desktop AI applications.
One principle. Multiple surfaces.
AVAILABLE NOW
Browser Extension
The current D[AI]NGEN product surface.
ViewAVAILABLE NOW · PACKAGED RELEASEDesktop
Packaged release available for qualified deployments with guided installation; technical maturity remains Preview.
ViewVALIDATED + IN DEVELOPMENTAI Coverage
Validated and developing workflow coverage.
ViewADVANCED DEVELOPMENTAI Usage & Cost Governance
Implemented measurement, attribution, cost, budget, alert, and spending-limit components; live provider integration and end-to-end enforcement remain under validation.
ViewGive AI its own access boundary.
See how D[AI]NGEN separates user authorization from AI authorization across current validated workflows.