What the extension reads, what it records, what it never records, and who receives it. Effective 7 October 2026.
This policy covers the browser extension Excubitor for Browsers, published by Aurakore IT Solutions
(“Aurakore”), Chrome Web Store item aafkbffcabldoanhbbodalgmaejngjbp.
Your employer decides to install the extension, chooses its settings, and decides what happens to the records, so your employer is responsible for that processing. Where your employer uses the console Aurakore hosts, Aurakore stores the records on your employer’s behalf and under its instructions. Where your employer runs the console in its own environment, Aurakore receives nothing from the extension at all.
Your employer should also give you its own notice about this monitoring. Questions about why it is used, who at your employer sees the records, and how long they are kept are best asked there first.
Only when your employer has installed it through browser management with a policy that names its console, a credential for that console, and a key for coded identifiers. Without that policy the extension reads nothing, sends nothing, and its toolbar icon says it is off.
When active, it runs only on the AI sites listed in its published package, and only at three moments: when you paste into the page, when you send a message, and when you attach a file. It does not run on any other website.
| Data | What the extension does with it | Leaves your device |
|---|---|---|
| Text you paste, send or type | Read on your device at the moment you paste or send, to check it | Never |
| Files you attach | Only the kind of file, from its name | Never; only that a file of that kind was attached |
| The AI site | Its host name, for example the site's address | Yes |
| What was found | A category and label, such as “card number” or “github token” | Yes |
| What happened | Recorded, coached, sent after coaching, or withheld | Yes |
| Size | A range, such as “200 to 2,000 characters” | Yes |
| Content fingerprint | A keyed one-way code of the text, so repeats can be counted without the text | Yes |
| Your work account email | Read from the browser profile to make your coded identifier | Never; only the coded identifier |
| Hourly counts | How many pastes, messages and files went to each listed AI site | Yes, unless your employer turns it off |
| Keystrokes, other websites, AI answers | Not read | Never |
The check looks for passwords, keys and access tokens; personal data such as social security numbers, card numbers and lists of email addresses; your employer’s own confidential terms; source code; and very large blocks of text or data files.
The extension reads the email address of the work account signed in to the browser and turns it into a coded identifier with a one-way keyed function. The key is set by your employer. The email address itself is never sent. Aurakore cannot turn the identifier back into your name; your employer, which holds the key, can, which is what lets it answer a request from you about your records. A browser with no signed-in account uses a random identifier kept on that device instead.
Depending on the mode your employer chooses, the extension records only (observe), shows you what was found before it goes and lets you edit or send anyway (coach), or does not paste or send certain kinds of content, such as keys (withhold). Its toolbar icon is always available: it shows whether the extension is on, who set it, what leaves the browser, and the records this browser has sent.
Only your employer’s Excubitor console, over an encrypted connection, using a credential your employer issued. That console is either hosted by Aurakore in the United States, or run by your employer in its own environment. In the console, your employer’s security team sees counts by site and by kind of content.
Aurakore does not sell these records, does not use them for advertising, and does not share them with anyone except as needed to run the console for your employer or as the law requires.
The use of information received from Google APIs and from the browser by this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. The data is used only to provide the extension’s single purpose, described above. It is not transferred to third parties except to provide that purpose, to comply with the law, or as part of a merger or acquisition; it is not used or transferred to determine creditworthiness or for lending; and no person reads it except with your employer’s permission for its security purposes, for security investigations, or to comply with the law.
Your employer sets how long records are kept. Records waiting to be sent are kept on your device until the console accepts them, up to a fixed limit; the extension keeps a list of the last 200 events this browser recorded, so you can see them. Removing the extension removes what it keeps on the device.
Records travel only over encrypted connections and only with a credential your employer issued. The text you write is never sent, so it cannot be exposed in transit or at rest. On the console, records are kept in a ledger where each record is linked to the one before it, so a changed or removed record can be detected.
The extension is for use by organizations on the browsers they manage. It is not directed to children.
If what the extension reads or records changes, this page changes with it, and the effective date above is updated. A change that records more about you is also described in the extension’s update notes.
Aurakore IT Solutions. Questions about this policy: use the contact form at aurakore.ai/security/excubitor. Questions about how your employer uses the extension: your employer’s privacy or security team.