A NexGen product
AI Prompt Shield
AI policies, technically enforced.
AI Prompt Shield is an on-premises security solution for the controlled use of generative AI in organisations. It checks requests to AI services against your security policies – and allows, modifies, logs or blocks them.
- Deployment
- On-premises
- Function
- Policy enforcement
- Evidence
- Auditable
- AI model
- None – you choose the AI service
-
Employee / application
Write a payment reminder to Berger Ltd, IBAN AT61 1904 3002 3457 3201.
- AI Prompt Shield On-premises, in your infrastructure
-
Policy & security check
Bank details detected – policy "Mask financial data".
-
Decision
- Allow
- Modify
- Block
-
AI service
Write a payment reminder to Berger Ltd, IBAN [removed].
AI policies without enforcement
Generative AI is already in use in many organisations – in the browser, in business applications and in custom integrations. The rules usually live in a policy: no personal data, no credentials, no confidential documents.
Whether these rules are followed depends entirely on the attention of each individual. Few organisations would accept that level of protection for networks, endpoints or databases.
- Sensitive data can leave the organisation unnoticed.
- Violations are detected late or not at all.
- There is no evidence of how AI is actually used.
Enforceable rules between user and AI service
AI Prompt Shield is placed between the user or application and the AI service. Every request is checked before it is forwarded – against the policies your organisation defines.
Allowed
The request complies with the policies and is forwarded unchanged.
Modified
Sensitive parts are removed or masked before the request is forwarded.
Logged
The decision is documented traceably – for governance and audit.
Blocked
The request is not forwarded; the user receives a clear notice.
AI Prompt Shield is not an AI model. It does not replace an AI service – it controls the way to it.
How AI Prompt Shield works
-
Receive the request
Requests from employees or applications go through AI Prompt Shield instead of directly to the AI service.
-
Check against policies
The content is checked against the rules your organisation defines – for example for personal data, credentials or confidential information.
-
Decide
Depending on the result, the request is allowed, modified or blocked – by fixed rules, not by discretion.
-
Provide evidence
Every decision is logged and available for governance, internal controls and audits.
Benefits
- Enforcement, not appeal
- Policies are applied technically, not just communicated.
- Protection of sensitive data
- Defined data categories are detected before they are sent to an AI service.
- Enable AI instead of banning it
- Employees can use AI productively – within clear, technically safeguarded limits.
- Consistent rules
- The same policies apply to people and to applications that call AI services.
- Traceability
- Logged decisions show how AI is actually used in your organisation.
- Data sovereignty
- Operated in your infrastructure; results and logs stay with you.
Architecture
AI Prompt Shield is the controlled transition between your organisation and the AI service. Everything that is checked and logged stays within your infrastructure.
- Policy engine
- Sensitive content detection
- Decision logic
- Audit log
- Administration
- Policy engine
- Evaluates every request against the rules your organisation configures.
- Sensitive content detection
- Identifies defined data categories such as credentials, bank details or personal data.
- Decision logic
- Allows, modifies, logs or blocks requests – consistently and reproducibly.
- Audit log
- Records decisions traceably and supports evaluations.
- Administration
- Maintaining policies and reviewing logs by authorised staff.
- Integration
- Requests are routed through AI Prompt Shield instead of directly to the AI service.
Governance
An AI policy only becomes effective when compliance with it can be verified. AI Prompt Shield turns rules into documented decisions.
- Centrally defined rules instead of individual interpretation
- Documented decisions as a basis for internal controls
- Evidence for management, internal audit and auditors
AI Prompt Shield supports your governance processes. On its own, it does not establish compliance with the GDPR, the AI Act or any other regulation.
On-premises
AI Prompt Shield runs in your own infrastructure. You decide which AI services are connected and where logs are stored.
- Checks take place in your environment before data leaves it
- Policies and logs remain under your control
- Independent of any particular AI vendor
Security
We build AI Prompt Shield according to the same principles we apply in customer projects.
- Secure by design
- Security requirements are part of architecture and development, not an afterthought.
- Minimal attack surface
- Few, deliberately chosen dependencies and restrictive defaults.
- Verifiable releases
- Every version ships with a SHA-256 checksum so that you can verify its integrity.
- Protected delivery
- Downloads only via personal, time-limited links after a server-side check.
Questions about AI Prompt Shield?
We are happy to demonstrate AI Prompt Shield and discuss how it fits into your environment.
Get in touch- office@nexgen-itsec.com
- +43 670 350 1599
- +43 670 659 2491
- St. Johann im Pongau, Austria