What are admin security settings?

Admin security settings are org-level controls that govern how the browser extension behaves for all members. Admins can configure these from Settings → Security. **Extension Access:** • **Require Sign-in for Extension** (default: on) — Users must sign in before the extension activates. • **Allow All AI Tools** (default: on, Team+) — When disabled, the extension only works on approved AI platforms. **Guardrail Behavior:** • **Enable DLP Security Rules** (default: on) — Master switch for all guardrail scanning. Turning this off disables all DLP checks org-wide. • **Allow Warning Override** (default: on, Team+) — When disabled, warning-level detections are treated as hard blocks. • **Auto-Redact Sensitive Data** (default: off, Team+) — Automatically replaces detected sensitive data with {{PLACEHOLDER}} tokens. **Activity & Privacy:** • **Activity Logging** (default: on, Team+) — Enables the Activity Log. Disabling stops recording but still tracks usage counts. • **Logging Detail Level** (default: Metadata Only, Team+) — Choose between metadata-only (tool, action, timestamp — no prompt text) or full logging (includes prompt text). Metadata-only is the privacy-first default. • **Log Retention Period** (default: no limit, Team+) — Set an automatic expiration (1–3,650 days) to delete old logs. Leave empty to keep indefinitely. Some settings are plan-gated and require a Team or Business plan. Changes take effect immediately for all members.