For organisations
AImori can be deployed and configured centrally – with no server, no account and no licence key. The policy lives on the device; the extension reads it from the browser's managed storage.
On this page
The path in four steps
- Define the rules: write the policy as JSON – easiest to start from the sample file
enterprise/example-policy.jsonin the source code on GitHub. - Deploy: via Group Policy (ADMX), Intune or with the registry scripts.
- Force installation: via the browser's
ExtensionInstallForcelist(Edge or Chrome) with the entrylefajbhockjgdhaohnacgaggfepianjh;https://clients2.google.com/service/update2/crx– the extension from the Chrome Web Store. - Verify:
edge://policyorchrome://policy→ "Reload policies". The popup then shows "Managed by …".
The most important policy values
| Goal | Key and value |
|---|---|
| No "Send anyway" | allowUserOverride: false |
| Hard-block IBAN and AHV | rules: { "iban": "block", "ch_ahv": "block" } |
| Allow only some of the supported AI sites | allowedSites: ["chatgpt", "copilot"] – sending and pasting are then blocked on Claude, Gemini and Microsoft 365 Copilot (copilot does not include m365copilot) |
| Notice or block on other AI sites (e.g. Perplexity) | aiSiteMode: "hint" or "block", approved tools in allowedAiSites, a button to the company tool with suggestedAiSite |
| Fix the countries | countryPacks: ["CH", "EU"] |
| Block file uploads on AI sites | blockUncheckedFiles: true |
| Block sending if the site is not recognised | blockWhenInactive: true |
| Your own terms (customer, project names) | customTerms: salt (64 hex characters) and SHA-256 checksums, 1–5 words per term, created with scripts/begriffe-hashen.mjs; the predecessor dictionary still works |
| Treat business and personal accounts differently | accountRules per AI site, e.g. business account hint, personal account block |
| Fix the evidence report | complianceReport, complianceFrameworks, complianceReportDays |
All keys with type and default: Settings via policy and the complete list in the source code. Invalid values are discarded individually and safe defaults are used.
Sample policy
Excerpt from the sample file (fictitious company, shortened):
{
"branding": { "companyName": "Example AG" },
"countryPacks": ["CH", "DE", "AT", "EU"],
"allowUserOverride": false,
"allowedSites": ["chatgpt", "copilot"],
"aiSiteMode": "hint",
"allowedAiSites": ["chatgpt", "copilot", "m365copilot"],
"rules": { "ch_ahv": "block", "iban": "redact", "email": "warn", "phone_e164": "off" }
}Files in the source code
The templates and scripts are not part of the extension package; they are in the source code on GitHub. The ADMX templates carry the store ID lefajbhockjgdhaohnacgaggfepianjh.
| File | Purpose |
|---|---|
enterprise/example-policy.json | complete sample policy (fictitious company) |
enterprise/example-ki-lenkung.json | sample: steer users to an approved AI tool |
enterprise/admx/dlx-edge.admx, dlx-chrome.admx | ADMX templates with ADML in en-US and de-DE |
enterprise/Deploy-Policy.ps1 | write the policy to the registry (with -PlanOnly only shows it) |
enterprise/Detect-Policy.ps1 | detection script for Intune |
enterprise/Remove-Policy.ps1 | remove the policy again |
extension/managed_schema.json | schema the scripts validate every policy against |
scripts/build-admx.mjs | create ADMX templates for a different extension ID: node scripts/build-admx.mjs --id <ID> |
scripts/begriffe-hashen.mjs | create checksums for your own terms (locally, no network) |
scripts/mandanten.mjs | for IT service providers: Intune and GPO files per customer with their own logo |
White label
IT partners can distribute AImori under their own name: product name, company name, logo, two colours, a support link and the notice on AI sites that are not approved, via the branding policy. Details: Branding.
Inform your staff
On managed devices, the popup shows "Managed by …"; on hover: "No inputs are stored or reported; this extension has no network access." Inform your staff about the rollout yourself regardless; check with your own legal advisor which obligations apply.