saife.fr

What It Is

sAife is a data loss prevention tool designed for enterprise generative AI use cases. It runs as a browser extension and performs real-time local detection when employees enter content into tools such as ChatGPT, Claude, Gemini, Microsoft Copilot, Mistral, and Perplexity. It identifies sensitive information such as IBANs, SIRET numbers, NIR numbers, email addresses, customer names, and contract data, then blocks, prompts for confirmation, or automatically anonymizes the data before it is sent.

Core Capabilities and Compliance

The product is not positioned as a traditional full-traffic DLP solution. Instead, it focuses on the “AI input box,” a blind spot that network DLP tools often struggle to see. sAife says it only monitors interactions with AI tools, not email, internal networks, or normal web browsing. Prompt content is not transmitted to or stored on its servers; only pseudonymous metadata, such as data type, timestamp, and target AI tool, is sent to its OVHcloud backend in France. The admin console provides a real-time dashboard for viewing incidents by employee, department, tool, and data type, with audit log export available. On compliance, the product emphasizes RGPD by design, AI Act traceability obligations, CNIL audit formats, and transparent employee notification under French labor law, but the site does not disclose formal security certifications such as ISO 27001 or SOC 2.

Deployment, Pricing, and Integrations

Deployment is relatively lightweight, with support for silent installation via Microsoft Intune, Jamf, Google Workspace Admin, Windows GPO, Chrome Browser Cloud Management, Microsoft Edge Enterprise, and similar tools. The company says it can be rolled out in 30 minutes. The Business plan costs €1 excluding tax per active endpoint per month and includes the Chromium extension, real-time detection, the full dashboard, log export, MDM deployment, French-language support, and a 99.9% SLA. The Enterprise plan starts at 2,000 endpoints and supports a dedicated tenant, sovereign hosting, and dedicated services. A 60-day free pilot is also available.

Pros, Cons, and Who It’s For

Its strengths are a focused use case, clear privacy boundaries, transparent pricing, and complementarity with existing DLP tools. It is particularly relevant for DPOs, CISOs/RSSIs, and legal and compliance teams operating under French and EU regulatory environments. Limitations include the fact that current information mainly centers on the Chromium extension, with limited disclosure around mobile devices, non-Chromium browsers, and internationalization support; Enterprise pricing still requires a quote. It is especially suitable for banks, healthcare organizations, law firms, defense-related entities, and other medium to large organizations in heavily regulated sectors.

Access from China and Alternatives

The site does not provide information on access from mainland China, payment methods, local support, or local compliance implementation, so its China access status is assessed as unknown. Chinese companies looking for similar capabilities may want to evaluate local DLP products, data security gateways, endpoint data leakage prevention tools, CASB/SSE solutions, or LLM security gateways, with particular attention to in-country data residency, Chinese sensitive-information recognition, and local compliance requirements.