Skip to content

Commit ae66cdc

Browse files
authored
[DLP] AI predefined profiles (cloudflare#25114)
1 parent fa9f44c commit ae66cdc

File tree

2 files changed

+28
-14
lines changed

2 files changed

+28
-14
lines changed

src/content/docs/cloudflare-one/policies/data-loss-prevention/detection-entries.mdx

Lines changed: 16 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -135,17 +135,19 @@ Your new document entry will replace the original document entry. If your file u
135135

136136
## AI prompt topics
137137

138-
DLP uses [Application Granular Controls](/cloudflare-one/policies/gateway/http-policies/#application-granular-controls) to detect and categorize prompts submitted to generative AI tools. Application Granular Controls analyzes prompts for both content and user intent. Supported prompt topic detections include:
139-
140-
| Detection entry | Description |
141-
| ------------------------------------- | ------------------------------------------------------------------------------------------------ |
142-
| Content: PII | Prompt contains personal information such as names, SSNs, or email addresses |
143-
| Content: Credentials and Secrets | Prompt contains API keys, passwords, or other sensitive credentials |
144-
| Content: Source Code | Prompt contains actual source code, code snippets, or proprietary algorithms |
145-
| Content: Customer Data | Prompt contains customer names, projects, business activities, or confidential customer contexts |
146-
| Content: Financial Information | Prompt contains financial numbers or confidential business data |
147-
| Intent: PII | Prompt requests specific personal information about individuals |
148-
| Intent: Code Abuse and Malicious Code | Prompt requests malicious code for attacks, exploits, or harmful activities |
149-
| Intent: Jailbreak | Prompt attempts to circumvent AI security policies |
150-
151-
To use an AI prompt topic, add it as an existing entry to a [custom DLP profile](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/#build-a-custom-profile).
138+
DLP uses [Application Granular Controls](/cloudflare-one/policies/gateway/http-policies/#application-granular-controls) to detect and categorize prompts submitted to generative AI tools. Application Granular Controls analyzes prompts for both content and user intent. Supported AI prompt protection detections include:
139+
140+
| Detection entry | Description |
141+
| ------------------------------------- | ------------------------------------------------------------------------------------------------- |
142+
| Content: PII | Prompt contains personal information such as names, SSNs, or email addresses. |
143+
| Content: Credentials and Secrets | Prompt contains API keys, passwords, or other sensitive credentials. |
144+
| Content: Source Code | Prompt contains actual source code, code snippets, or proprietary algorithms. |
145+
| Content: Customer Data | Prompt contains customer names, projects, business activities, or confidential customer contexts. |
146+
| Content: Financial Information | Prompt contains financial numbers or confidential business data. |
147+
| Intent: PII | Prompt requests specific personal information about individuals. |
148+
| Intent: Code Abuse and Malicious Code | Prompt requests malicious code for attacks, exploits, or harmful activities. |
149+
| Intent: Jailbreak | Prompt attempts to circumvent AI security policies. |
150+
151+
Each detection entry is categorized as either Content or Intent. Content focuses on the specific text or data the user provides the generative AI tool. It is the information the AI needs to process and analyze to generate a response. Intent focuses on the user's goal or objective for the AI's response. It dictates the type of output the user wants to receive. This category is particularly useful for customers who are using SaaS connectors or MCPs that provide the AI application access to internal data sources that contain sensitive information.
152+
153+
To use an AI prompt topic, configure the corresponding [predefined DLP profile](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/#ai-prompt) or add it as an existing entry to a [custom DLP profile](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/#build-a-custom-profile). AI prompt protection is available for ChatGPT, Google Gemini, Perplexity, and Claude.

src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles.mdx

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,18 @@ import { Render } from "~/components";
99

1010
Cloudflare Zero Trust provides predefined DLP profiles for common types of sensitive data. Some profiles include built-in validation checks to increase detection granularity. Additionally, you can configure [advanced settings](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings/) for predefined profiles.
1111

12+
## AI Prompt
13+
14+
DLP provides AI prompt protection with the following predefined profiles:
15+
16+
- AI Prompt: AI Security
17+
- AI Prompt: Customer
18+
- AI Prompt: Financial Information
19+
- AI Prompt: PII
20+
- AI Prompt: Technical
21+
22+
For more information on included detection entries, refer to [AI prompt topics](/cloudflare-one/policies/data-loss-prevention/detection-entries/#ai-prompt-topics).
23+
1224
## Credentials and Secrets
1325

1426
The following secrets are validated with regex.

0 commit comments

Comments
 (0)