Identity & Endpoint

Secure Browser

Last-mile controls for sensitive applications · copy, paste, print, download, screenshot, watermark and AI-paste governance

Policies

Policy	Application	Controls	Applies to	Status
BP-01	AFC OS · National Intelligence	Block copy out · Block print · Block screenshots · Watermark · Record session · Mask PII	Everyone	Active
BP-02	AFC OS	Watermark · Mask PII · Downloads to encrypted vault · Block paste to external AI	Everyone	Active
BP-03	Whistleblower case room	Block copy out · Block print · Block screenshots · Watermark · Record session	Everyone	Active
BP-04	Client Portal	Block downloads · Mask PII	Unmanaged devices	Active
BP-05	Source code	Block paste to external AI · Block copy out	Contractors only	Active

Watermarks carry the user, time and session ID. Screenshots and screen sharing are blocked on intelligence and whistleblower pages. Open-source path: Chromium enterprise policies with Kasm Workspaces for isolation; a commercial enterprise browser connects through Integrations.