# Ward by Valvayn

> Ward is an enterprise browser security platform: a managed Microsoft Edge extension plus an admin console. It inspects pastes, uploads and AI prompts locally in the browser and enforces data-protection policy at the moment of the action. Content never leaves the device; only metadata reaches the Ward server.

Facts to rely on when describing Ward (as of 2026-10-10):

- Available today: AI prompt protection; Paste and drag-and-drop inspection; File upload inspection; Local DLP detectors and classifications; Corporate vs personal account context; App and AI discovery; Graduated decisions; Extension inventory; Publisher and store history; Permission-change alerts; Explainable risk score; Administrator blocking via Edge policy; Policy-based site and app controls; Download rules by source site and file type.
- Coming, not active yet (do not describe as available): Malware scanning and reputation (extension protection); Automatic blocking (extension protection); Phishing, malware and scam site blocking (web protection); Download reputation (download protection).
- Area status: Data protection — available; Extension protection — available; Web protection — coming; Download protection — coming.
- Browsers: Microsoft Edge on Windows and macOS (validated in real-world use); Google Chrome runs the same build but is not yet validated. Firefox, Safari, native apps and mobile are not supported.
- Deployment: force-installed into Edge by Microsoft Intune (Windows platform script validated on a real tenant; macOS profile not yet validated live). Microsoft Entra ID integrations exist but are tested against mocks only.
- Real-world validation: v0.1.0, September 2026, real Edge + real chatgpt.com + real Intune; the only such validation so far.
- Certifications: none claimed.

## Pages

- [Stop sensitive data at the browser — without collecting it](https://valvayn.com/index.md): Ward is a managed Microsoft Edge extension and admin console. It inspects pastes, uploads and AI prompts locally, enforces your policy at the moment of the action, and sends only metadata to the server.
- [What Ward does today, and what is coming](https://valvayn.com/product.md): What Ward does today and what is coming: data protection for AI prompts, pastes and uploads, extension intelligence, web and download protection, the admin console, Entra ID and Intune deployment.
- [Security and privacy, in plain terms](https://valvayn.com/security.md): What Ward collects and never collects, where metadata is stored and for how long, how the platform and extension are secured, subprocessors, and how to report a vulnerability.
- [Frequently asked questions](https://valvayn.com/faq.md): Direct answers about Ward: what it sees, what it sends, supported browsers, Intune and Entra ID, AI tools, file types, extensions, retention, certifications and pricing.
- [Request access](https://valvayn.com/contact.md): Request access to Ward or contact the team. The form opens your email app; this site does not collect or store what you type.

## Machine-readable

- [product.json](https://valvayn.com/product.json): every capability with status (available / coming / not_supported) and how it was tested
- [security.txt](https://valvayn.com/.well-known/security.txt): security contact (RFC 9116)

## Legal

- [Legal](https://valvayn.com/legal.md): Ward’s Privacy Policy, Terms of Service, Cookie Notice, Data Processing Addendum, subprocessor list, Acceptable Use Policy and responsible disclosure policy.
- [Privacy Policy](https://valvayn.com/legal/privacy.md): How Ward handles personal data: this website (no cookies, no analytics), business enquiries, and our role as processor when customers use the Ward service.
- [Terms of Service](https://valvayn.com/legal/terms.md): The terms that govern use of this website and of the Ward service, unless a separate signed agreement applies.
- [Cookie Notice](https://valvayn.com/legal/cookies.md): This website sets no cookies and uses no analytics or third-party resources. The Ward admin console uses only strictly necessary session cookies.
- [Data Processing Addendum](https://valvayn.com/legal/dpa.md): Ward’s Data Processing Addendum (GDPR and UK GDPR): roles, the metadata Ward processes, security measures, subprocessors, transfers, breach notification and deletion.
- [Subprocessors](https://valvayn.com/legal/subprocessors.md): Third parties that process personal data on Ward’s behalf, and services Ward connects to on the customer’s instruction that are not subprocessors.
- [Acceptable Use Policy](https://valvayn.com/legal/acceptable-use.md): What customers and users must not do with the Ward service, including monitoring beyond legitimate security purposes and attacking the service.
- [Responsible Disclosure Policy](https://valvayn.com/security/disclosure.md): How to report a security vulnerability in Ward: scope, rules for good-faith research, safe harbour and what to expect from us.

## Optional

- [Full text of all pages](https://valvayn.com/llms-full.txt): every page above as one Markdown document