Question 1

What does CloakWorks do?

Accepted Answer

CloakWorks is browser-native AI data protection. It inspects text, pastes and selected uploads at the AI input boundary, before submission to an external AI tool. Classification runs locally in the extension, and the resulting decision is applied before the submission proceeds.

Question 2

What are the four possible decisions?

Accepted Answer

APPROVE lets clean content proceed. REDACT replaces sensitive values. BLOCK stops the submission. REVIEW calls for a human decision. The applicable outcome depends on the input and the policy for that workflow.

Question 3

What text, documents and images can it inspect?

Accepted Answer

The overview describes inspection of text about to be submitted and clipboard content pasted into supported AI inputs. For documents and images selected for upload, it describes file-type checks, optical character recognition (OCR), metadata inspection and personally identifiable information (PII) classification.

Question 4

Does it read my email, calendar or all my local files?

Accepted Answer

No. The documented inspection scope is the AI input path: text, pastes and files the user selects. It does not include email, calendar data, other extensions or local files beyond a selected upload.

Question 5

Can masked values stay consistent across AI tabs?

Accepted Answer

The compatibility matrix describes deterministic tokenization: the same sensitive value receives the same replacement token across supported AI tabs on the same workstation. This preserves references within a multi-tab workflow without sharing the original value. The document does not establish synchronization across devices.

Question 6

Where does classification happen?

Accepted Answer

Classification runs locally inside the extension. Prompt and file content is not sent to MugatuAI or another service for classification. Redaction happens on the device before the AI submission proceeds.

Question 7

Does any content still reach the AI provider?

Accepted Answer

Yes, when a submission is allowed. The receiving AI tool gets the approved input or the redacted version. A blocked submission does not proceed. Local classification is not a claim that the destination AI provider receives no content; its own terms and data-handling policies still apply.

Question 8

Does CloakWorks retain prompts, uploads or redacted values?

Accepted Answer

The overview states that prompt content, selected uploads, clipboard content and redacted values are not retained. That content-retention boundary is separate from a record that a policy decision occurred.

Question 9

What does an audit record contain?

Accepted Answer

The overview describes a record that a decision occurred, with a timestamp. It does not contain the sensitive content that triggered the decision. Review the Security page and your deployment configuration when assessing fleet reporting and data handling.

Question 10

What does zero content telemetry mean?

Accepted Answer

The supplied documents describe no channel for sending prompt or file content to MugatuAI for classification or telemetry. This refers to the extension’s handling of user content, not to every service involved in purchasing, license activation, website analytics or the receiving AI provider.

Question 11

Which AI tools are named in the documents?

Accepted Answer

The documents name ChatGPT, Claude, Gemini and Grok, alongside enterprise AI workspaces. Protection is applied at the supported web input rather than by sending content to a remote classification engine. Validate the specific website, input type and policy with synthetic data before approving a workflow.

Question 12

Which browsers are covered?

Accepted Answer

The enterprise compatibility matrix lists Chrome, Edge, Safari, Firefox, Brave and Opera. The site’s current install and fleet deployment instructions cover Chrome and Edge. For Safari, Firefox, Brave or Opera, request confirmation of the available build and deployment method for your environment before planning a rollout.

Question 13

Which operating systems appear in the compatibility matrix?

Accepted Answer

The matrix lists Chrome fleet targets across Windows, macOS, Linux and ChromeOS, and describes Safari integration on macOS. These are browser-deployment targets, not desktop-app system requirements. Confirm the browser build, operating system and management method together for your planned deployment.

Question 14

How can IT deploy CloakWorks to a managed fleet?

Accepted Answer

The documents describe force-install and managed browser policies. The existing deployment guide covers Chrome Enterprise, Microsoft Intune, Jamf Pro, Windows Group Policy and RMM scripts for Chrome and Edge. Validate policies on test devices before expanding the rollout.

Question 15

Can one policy cover multiple AI workspaces?

Accepted Answer

The matrix describes centrally defined protected-domain rules applied to both internal enterprise hostnames and public AI platforms. Confirm the supported domains and how the policy is delivered in your browser and management environment before relying on that coverage.

Question 16

How are extension updates managed?

Accepted Answer

The overview describes standard installs updating through the Chrome Web Store signed-update channel. For managed fleets, it describes force-install and customer control over the deployed version. Ask for the version-control configuration for your browser and management platform; do not assume every installation supports the same pinning method.

Question 17

What risks remain if an extension or update is compromised?

Accepted Answer

The overview acknowledges malicious updates, compromised publisher accounts and dependency supply-chain risks. Local processing and no retained prompt store reduce centralized exposure, but they do not make an extension immune to compromise. A malicious update could change its behavior, so assess permissions, signing, dependencies and update controls rather than assuming the impact is limited to a wrong classification.

Question 18

Can our security team request technical details?

Accepted Answer

Yes. The overview offers an appendix covering content-script boundaries, the classifier interface, signing and dependency pinning. Contact Mugatu AI to request those materials or a security questionnaire for your review.

Question 19

Does CloakWorks guarantee regulatory compliance or completed SOC 2 assurance?

Accepted Answer

SOC 2 auditing is underway; completed attestation is not claimed. No completed SOC 2 report is currently offered. CloakWorks is a safeguard within a wider governance program, not a HIPAA or ITAR compliance guarantee. Assess your policies, access controls, agreements and receiving AI provider alongside the product.

CloakWorks FAQ

Protection & everyday use

Privacy & data handling

Browsers & AI coverage

Enterprise deployment

Security & assurance

Need details for your security review?