Skip to content
AImori

For organisations

AImori can be deployed and configured centrally – with no server, no account and no licence key. The policy lives on the device; the extension reads it from the browser's managed storage.

On this page

The path in four steps

  1. Define the rules: write the policy as JSON – easiest to start from the sample file enterprise/example-policy.json in the source code on GitHub.
  2. Deploy: via Group Policy (ADMX), Intune or with the registry scripts.
  3. Force installation: via the browser's ExtensionInstallForcelist (Edge or Chrome) with the entry lefajbhockjgdhaohnacgaggfepianjh;https://clients2.google.com/service/update2/crx – the extension from the Chrome Web Store.
  4. Verify: edge://policy or chrome://policy → "Reload policies". The popup then shows "Managed by …".

The most important policy values

GoalKey and value
No "Send anyway"allowUserOverride: false
Hard-block IBAN and AHVrules: { "iban": "block", "ch_ahv": "block" }
Allow only some of the supported AI sitesallowedSites: ["chatgpt", "copilot"] – sending and pasting are then blocked on Claude, Gemini and Microsoft 365 Copilot (copilot does not include m365copilot)
Notice or block on other AI sites (e.g. Perplexity)aiSiteMode: "hint" or "block", approved tools in allowedAiSites, a button to the company tool with suggestedAiSite
Fix the countriescountryPacks: ["CH", "EU"]
Block file uploads on AI sitesblockUncheckedFiles: true
Block sending if the site is not recognisedblockWhenInactive: true
Your own terms (customer, project names)customTerms: salt (64 hex characters) and SHA-256 checksums, 1–5 words per term, created with scripts/begriffe-hashen.mjs; the predecessor dictionary still works
Treat business and personal accounts differentlyaccountRules per AI site, e.g. business account hint, personal account block
Fix the evidence reportcomplianceReport, complianceFrameworks, complianceReportDays

All keys with type and default: Settings via policy and the complete list in the source code. Invalid values are discarded individually and safe defaults are used.

Sample policy

Excerpt from the sample file (fictitious company, shortened):

{
  "branding": { "companyName": "Example AG" },
  "countryPacks": ["CH", "DE", "AT", "EU"],
  "allowUserOverride": false,
  "allowedSites": ["chatgpt", "copilot"],
  "aiSiteMode": "hint",
  "allowedAiSites": ["chatgpt", "copilot", "m365copilot"],
  "rules": { "ch_ahv": "block", "iban": "redact", "email": "warn", "phone_e164": "off" }
}

Files in the source code

The templates and scripts are not part of the extension package; they are in the source code on GitHub. The ADMX templates carry the store ID lefajbhockjgdhaohnacgaggfepianjh.

FilePurpose
enterprise/example-policy.jsoncomplete sample policy (fictitious company)
enterprise/example-ki-lenkung.jsonsample: steer users to an approved AI tool
enterprise/admx/dlx-edge.admx, dlx-chrome.admxADMX templates with ADML in en-US and de-DE
enterprise/Deploy-Policy.ps1write the policy to the registry (with -PlanOnly only shows it)
enterprise/Detect-Policy.ps1detection script for Intune
enterprise/Remove-Policy.ps1remove the policy again
extension/managed_schema.jsonschema the scripts validate every policy against
scripts/build-admx.mjscreate ADMX templates for a different extension ID: node scripts/build-admx.mjs --id <ID>
scripts/begriffe-hashen.mjscreate checksums for your own terms (locally, no network)
scripts/mandanten.mjsfor IT service providers: Intune and GPO files per customer with their own logo

White label

IT partners can distribute AImori under their own name: product name, company name, logo, two colours, a support link and the notice on AI sites that are not approved, via the branding policy. Details: Branding.

Inform your staff

On managed devices, the popup shows "Managed by …"; on hover: "No inputs are stored or reported; this extension has no network access." Inform your staff about the rollout yourself regardless; check with your own legal advisor which obligations apply.

Free for Chrome