Home/Docs/Tanda Guard

Tanda Guard Chrome MV3 setup

Client-side DOM interception, local Malaysian PII redaction rules, and silent rollout across enterprise workstation fleets.

Updated Sep 17, 2026

||View API spec

Tanda Guardis RedactNode's client-side agent for Chromium-based browsers (Chrome, Edge, Brave). It transparently inspects employee web inputs within ChatGPT, Claude, and Gemini in real-time, swapping sensitive Malaysian identifiers into surrogate tokens before the network request is triggered.

Sub-2ms Zero-Latency ExecutionAll syntactic pattern evaluations occur entirely in-memory inside client browser WebAssembly. No network roundtrip is incurred before the input text is sanitized.

1. Extension Architecture

Tanda Guard adheres strictly to Google Chrome Manifest V3 security boundaries:

Execution ModelIsolated World MV3

Local MemoryWebAssembly WASM

Host TargetChat AI Domains Only

2. Malaysian Syntax Rules

Built-in Malaysian statutory regex patterns and deterministic verification checksums:

IDENTIFIER	SYNTAX PATTERN	VALIDATION METHOD	SURROGATE TOKEN
MyKad NRIC	YYMMDD-PB-###G	Validates Malaysian PB state codes (01-16) and odd/even gender parity check.	[MYKAD_TOKEN_850315]
Malaysian Mobile	+601[0-46-9]-###-####	Enforces MCMC-allocated telco prefix blocks (Maxis, CelcomDigi, U Mobile, YTL).	[PHONE_TOKEN_6012]
Passport Number	[AHK][0-9]{8}	Malaysian Immigration Department standard issue document formats.	[PASSPORT_TOKEN_A12]
Vehicle Registration	[A-Z]{1,3} [0-9]{1,4} [A-Z]?	JPJ state plate prefix algorithms (e.g. W, B, J, P, KV) with checksum.	[VEHICLE_TOKEN_WQA]
Maybank / CIMB Account	10-14 digits numeric	Luhn algorithm and known financial institution routing prefixes.	[BANK_ACCT_TOKEN_114]

3. DOM Event Interception

Tanda Guard captures text entry before the host web application dispatches its WebSocket or fetch requests:

1. Clipboard Paste EventWhen an employee pastes customer records or payroll data into the chat textarea, the clipboard data is sanitized in the event handler prior to DOM text node insertion.

2. Keyboard Input & CompositionMonitors input buffers with debounced evaluation, displaying subtle visual indicators in the browser toolbar when active tokenization takes place.

3. Form Submit & Enter KeyPerforms final validation barrier check. If any untokenized personal identifier remains, it is immediately substituted with its deterministic surrogate.

4. Enterprise Silent Rollout (GPO / Intune)

Enterprise IT administrators can deploy Tanda Guard silently across thousands of managed Windows or macOS workstations with zero employee intervention:

policy.json (Google Chrome / Microsoft Edge)

JSON POLICY

{
  "ExtensionSettings": {
    "redactnode_tanda_guard@enterprise": {
      "installation_mode": "force_installed",
      "update_url": "https://gateway.internal.firm/chrome/update.xml",
      "runtime_allowed_hosts": [
        "*://chatgpt.com/*",
        "*://chat.openai.com/*",
        "*://claude.ai/*",
        "*://gemini.google.com/*",
        "*://copilot.microsoft.com/*"
      ]
    }
  }
}

For Windows Active Directory, configure the registry key under HKLM\Software\Policies\Google\Chrome\ExtensionInstallForcelist.

Next steps

SDK Quickstart

Configure programmatic backend integrations via Python SDK.

Start Quickstart →

Malaysian PDPA Compliance

Review statutory requirements under Act 858.

Read PDPA Guide →

← Quickstart REST API Reference →