AI Security Rules & DLP

What is Enterprise DLP (network content scanning)?

Enterprise DLP extends TeamPrompt's protection to the network level. Instead of just blocking AI tool domains (DNS), it inspects the actual content of prompts at the network level. How it works: 1. TeamPrompt pushes your DLP rules to Cloudflare as a DLP Profile 2. Cloudflare creates an HTTP policy that scans traffic to AI tool domains 3. If a prompt matches a DLP rule, the entire request is blocked before reaching the AI tool 4. This covers native apps, CLI tools, and API calls — not just the browser Requirements: • Cloudflare in Traffic+DNS mode (not DNS only) • Root CA certificate installed on managed devices • Enterprise IT team to manage certificates and device enrollment To enable: call POST /api/integrations/cloudflare/enterprise with action 'sync-dlp'. This is an API-only feature for now — UI coming soon. Note: Enterprise DLP can block but cannot redact. Only the browser extension can auto-replace sensitive data with placeholders. For the best protection, use both.