
Should an AI Agent Use the Employee's Own Browser?
Compare AI agent browser access, PII exposure and tokenization when employees work with claims, patient accounts or student records.
Research topic
Research on ChatGPT Work for AI agent workflows, with tokenization, access controls and evidence for teams handling sensitive business data.

Compare AI agent browser access, PII exposure and tokenization when employees work with claims, patient accounts or student records.

Claude in Chrome runs in the user's own browser and can request 1Password logins, so assume it acts in signed-in sessions. Check which apps it reaches.

Only with admin scoping of what the agent reaches and a record kept outside the product, since OpenAI's compliance logs keep 30 days. Check the connectors.

Seventeen enterprise agents can work on screens with PII today, and for most the model receives whatever the account may see. Check for tokens first.

No. A card number on a checkout page ChatGPT Work reads passes to the model and sits inside the cardholder data flow whatever plan the company bought, so ask where the number is replaced before the model sees it, who approves the payment, and what record of the screen survives the 30-day log.

ChatGPT Work controls the enterprise workspace and its administrator settings, while RedactSure, a ChatGPT Work alternative built for AI agents, replaces values on the rendered screen before a model reads them. RedactSure is an alternative way to think about agent browsing security, because it protects sensitive data as it is rendered on a screen, before an agent uses it.

Not completely. OpenAI's compliance logs record the conversation and keep it for 30 days, and the admin FAQ says those records "don't establish a complete audit trail" for every browser interaction, tool call or approval, so ask what the log holds for each page before you treat it as evidence.

No, not as it stands: ChatGPT Work reads the QuickBooks bill and the Chase payment screen inside a signed-in session, and OpenAI's admin page says its compliance records do not establish a complete audit trail for every browser interaction, tool call or approval. Ask what the model receives and who approves each payment.