Platform / Data Shield
Data Shield sits in the path of every outbound AI call — not beside it. It's the reason your team can use AI without your compliance team losing sleep, and it's free on every DouJou deployment.
Free on every deploymentHow it works
Low-sensitivity workspaces where data can flow to external models without additional review.
The default. Sensitive values are automatically masked before they reach any external model — this is what an unconfigured workspace gets, never “open” by accident.
Nothing crosses the boundary at all. For your most sensitive data, by policy.
What's actually enforced
Every AI call in the product — not most, not the ones someone remembered to wire up — passes through the same enforcement point before it leaves your boundary.
Automatically anonymizes sensitive values before they leave, and can rehydrate them back for an authorized viewer on the way in — so your team still gets a useful answer, without the raw data ever having left.
Every call is logged — what was asked, what was stripped, where it went, and what came back. Built to be shown to an auditor, not taken on faith.
The default matters: a workspace that’s never touched this setting is guarded and masked, not open. Turning on protection isn’t something your team has to remember to do.