Home / Guides
Guides
How-tos for developers masking PII before LLM APIs, and for SecOps teams securing ChatGPT / Claude browser sessions with NoeticGuard.
Developers / SDK
How to mask PII before calling the OpenAI API (Node.js)
Run deterministic PII masking with @noeticguard/core in your Node backend before openai.chat.completions.create — local tokens, no cloud scrubbing endpoint.
PII redaction vs masking vs tokenization for LLM egress
A decision matrix for CTOs: when to shred, when to mask, and when deterministic [EMAIL_n] tokens beat one-way redaction for AI traces.
Presidio / custom regex vs NoeticGuard for prompt scrubbing
Compare Microsoft Presidio, home-grown regex, and NoeticGuard for LLM prompt scrubbing — local engines, deterministic tokens, and a policy/quota control plane.
Designing deterministic [EMAIL_n] tokens for LLM traces
How stable [EMAIL_1]-style tokens keep support and debugging possible while keeping raw PII out of ChatGPT, Claude, and OpenAI request logs.
How to mask PII before calling the Claude API (Node.js)
Run deterministic PII masking with @noeticguard/core in your Node backend before anthropic.messages.create — local vault tokens, no cloud scrubbing endpoint.
How to prevent API keys and secrets in LLM prompts
Stop OpenAI keys, AWS credentials, and JWTs from reaching ChatGPT, Claude, or Gemini — local Secrets Guard patterns and vault-safe tokenization for developers.
GDPR and LLM egress: mask PII before OpenAI, Claude, or Gemini
A practical GDPR-oriented checklist for engineering teams: data minimization, processor boundaries, and on-device masking before any third-party LLM API. Same pattern maps to KVKK-oriented programs (TCKN in core) — orientation, not certification.
IT / SecOps
Why classic DLP fails on ChatGPT and Claude browser sessions
HTTPS LLM chats bypass many network DLP controls. How on-device Browser Shield closes the employee ChatGPT/Claude gap without proxying raw prompts.
How to stop employees from pasting PII into ChatGPT
Network DLP misses browser LLM paste. Roll out on-device Browser Shield, workspace policy, and telemetry so customer data never leaves the device unmasked.
Shadow AI and browser DLP: controlling unsanctioned LLM use
Employees adopt new chat UIs faster than CASB catalogs update. Close the shadow-AI gap with client-side masking on ChatGPT, Claude, Gemini, and DeepSeek.
Securing Microsoft Copilot and M365 Copilot from PII leaks
Copilot sits inside Word, Outlook, and Teams — another LLM egress surface. Compare Purview controls with on-device Browser Shield for unsanctioned web LLMs.
Employee AI use policy template for ChatGPT, Claude, and Gemini
Draft an enforceable AI acceptable-use policy: approved tools, PII rules, incident response, and technical controls (Shield + MDM) security teams can actually deploy.