Architecture and data flow

BeeSensible consists of a Chrome and Edge browser extension, a hosted API, an admin dashboard, and a BeeSensible-managed detection service. Together, these parts detect sensitive data while a user works in a supported web application.

The extension only runs on websites supported by BeeSensible. These include common AI tools, email and chat applications, social platforms, and BeeSensible pages. Admins configure how supported apps are handled in the dashboard.

#What happens when you type

When a signed-in user types in a supported app, the text from the input field is analysed for sensitive data. Depending on how the organisation is set up, detection runs either on the user's own machine, through the desktop app, or on BeeSensible-managed infrastructure inside the EU. Either way, the detection flow does not call external AI services such as OpenAI, Anthropic, or Google.

Detection returns which sensitive values were found, where they are in the text, and what level they have. That response is used to draw highlights in the page. The text is not changed automatically, and sending is not technically blocked.

#Where detection runs

BeeSensible can run detection in two places.

On the user's machine. Through the desktop app, detection runs on-device. The text being checked stays on the machine and is not sent anywhere. Only plain counts, with no text, go to the dashboard.

In the EU cloud. On its own, the browser extension sends the text to the BeeSensible API, where detection runs in working memory and the text is then discarded. Nothing is stored. The application, database, and storage run on Scaleway in the Amsterdam region. This is the zero-install alternative for teams that would rather not install anything.

#What admins see

The analytics dashboard shows detections in aggregate, for example by period, app, entity type, and level. The dashboard does not show full message text.

Detection events do contain information needed for analytics, security, and personal notifications. The admin UI is meant for overview and configuration, not for reading messages or prompts.

#Sending remains the user's action

BeeSensible helps users notice sensitive data before they share it. The extension only changes text when the user chooses an action, such as replace, mask, or delete.

#Documents

For the data processing agreement, DPIA, or security materials, email trust@beesensible.eu. We reply in Dutch or English.