Safe use of AI in your company — checked every day, not once a year
An app for the web, desktop and mobile that continuously shows which AI tools are in use, when sensitive data goes into them, what is exposed to the internet and whether a DDoS attack is heading your way.
Beta from March 2027, general availability from May 2027
We are looking for five companies to join the beta programme and shape the product with us. The quickest route is to start with an AI audit — its results carry over into the Monitor and half the audit price is deducted.
Eight things nobody else watches together
Shadow AI
Picks up new AI tools and their users from Microsoft 365, Google Workspace, DNS and the browser extension, each with a vendor risk rating.
Sensitive data into AI
Warns about or stops pasting national ID numbers, card and account numbers, passwords and confidential documents. Checked on the computer; content never leaves it.
AI app permissions
Which app reads the whole company's mail and files, who consented, who lacks MFA, who has left but still holds a licence.
Leaked keys
API keys for OpenAI, Anthropic, Google and others in repositories and on the public internet. Only a fingerprint is stored, never the key.
Exposed AI services
Internet-reachable models, vector databases, notebooks and agent tools without a password — on your IP addresses and domains.
DDoS attacks
Attacks on your IP addresses, from the Protectione Network Security installation at your internet provider — no box on your premises.
Agents and MCP
What each AI agent may do, whether a human approves irreversible actions and whether it can be switched off instantly.
Incidents and deadlines
Incident log, countdown to the 24 h / 72 h / 30-day deadlines and a draft notification. You file it; we keep track of time and evidence.
One number for management, detail for IT
- AI Risk Score 0–100 with traffic light and trend
- AI tools — approved, tolerated, prohibited, new in the last 7 days
- Sensitive data caught, by type, without content
- Open findings by severity and the oldest unresolved one
- DDoS status — quiet, attack, mitigation; 24-hour peak
- AI Secure certificate status — X of Y criteria met
- Push notifications to phone and desktop, email, Microsoft Teams
- Two-page monthly report for management
We watch data, not people
What is monitored
- Only access to AI services in our catalogue
- AI app permissions in company accounts
- Type and count of sensitive data pasted into AI
- Company devices and accounts only
What is not
- The content of AI prompts and answers
- The content of emails and documents
- Any other browsing
- Private devices
Overviews are aggregated; named views only for a designated role and logged. A template staff notice is part of the service.
Priced per protected user
Monthly prices excluding VAT; approximate EUR at CZK 25/€. 24-month commitment −7 %, 36 months −10 %, annual prepayment a further −5 %.
Start
- Shadow AI and tool inventory
- AI app permissions
- Web, desktop and mobile
- Weekly and monthly report
Advanced
- Everything in Start
- Sensitive data protection in the browser
- Rules: allow / warn / block
- Leaked keys and attack surface
- DDoS via your ISP
- AI Secure certificate included
Complete
- Everything in Advanced
- Agents, MCP and endpoint agent
- Monthly chatbot test
- Incidents and notification deadlines
- Certificate up to AI Secure+
- Business support
Enterprise (on-premise, own SSO, 99.9 % availability) on request. Automated detection runs around the clock; expert support during business hours, with Complete also evenings and Saturdays.
For companies, public bodies and their IT providers
Small companies
Accountants, law firms, estate agents, medical practices — anywhere client data ends up in AI.
Mid-sized companies
Rolling out Copilot, answering customer security questionnaires or facing NIS2 obligations.
Municipalities and public bodies
AI in the office, citizens' personal data, cybersecurity law. A small contract, quickly awarded.
IT providers and ISPs
Offer AI Shield to your customers. An ISP running Protectione Network Security supplies DDoS data with nothing installed at the customer.
What people ask most
What do we need to install?
The minimum is one click: read-only consent to connect Microsoft 365 or Google Workspace. For more detail, point your DNS to our resolver and have IT roll out the browser extension via Intune or Google Admin.
Where is our data?
In data centres in the Czech Republic. We do not use your data to train AI models.
Does AI Shield block AI?
Only if you set it to. The default mode warns. The aim is for people to use AI safely, not to stop using it.
Does AI Shield file notifications for us?
No. Your organisation remains the obliged entity. The app prepares a draft, tracks deadlines and keeps the evidence.
What if our ISP does not use Protectione?
Everything except the DDoS view works without it. We can also take DDoS data from your own flow export, or offer your ISP a partnership.
Protectione is not a law firm and does not provide legal services. Information on legislation is for guidance only.
For business and public bodies
We find out which AI tools your people use and where data goes, watch your attack surface and DDoS, and prepare you for NIS2 obligations. In plain language, with evidence for inspectors and customers alike. Learn more →
AI Audit
Your staff use ChatGPT, Copilot and AI features in dozens of other apps. In two to six weeks we find out exactly what, with which data and how an attacker could reach it — and give you a plan to put it right. Learn more →
Start with a 30-minute call
We go through how your company uses AI and what the law asks of you, and tell you whether an audit makes sense or a smaller step will do.