Privacy
Operator: Diversified Tech Solutions, operating Defensible Score, 4100 North Roan Street, Suite 208, Johnson City, TN 37604.
Product: Defensible CUI Guard 0.1.x.
Effective: 26 September 2026.
Summary
CUI Guard warns you before text that looks like Controlled Unclassified Information is pasted into a risky or unlisted website. Matching happens on your device. Version 0.1 does not send clipboard contents, page contents, or warning counts to Defensible Score or anyone else.
The Defensible Score website policy is at defensiblescore.com/privacy/. This page is the policy for the extension.
The Firefox data-collection declaration is none.
How text is handled
- Paste: the extension reads plain text from that paste event, long enough to test the patterns. If it does not match, it is discarded. If it matches, it is held in memory until you block or allow, then discarded.
- Copy: the extension looks at the selection you copied. It does not read the clipboard in the background.
- The dialog lists marker names and the site host. It does not show the pasted text.
- The background script receives an action name, the host, and marker ids. It does not receive the text.
There is no clipboard polling, no screenshot capture, and no keylogger.
Stored on the device
| Data | Why |
|---|---|
| Allow list, high-risk list, marker packs, org literals and patterns | Your policy |
| Warnings today, and allows on high-risk sites today | The badge and the coaching link |
| Hosts you allowed for this browser session | So that host is quiet until the session ends |
| Pause-until time | Break-glass |
Permissions
The content script runs on sites you visit so it can see the paste event. Chrome and Firefox will say the extension can read and change data on websites you visit. That access is used to hold a matching paste and to show the warning. It is not used to upload page contents. storage keeps the settings above.
What this is not
Not a certification. Not a claim that CUI cannot leave the browser. Not enterprise DLP. Screenshots, phones, retyped text, and non-browser apps are outside its reach. Defensible Score is not a C3PAO and does not issue CMMC certifications.
Later
If a future version offers anonymous warning counts, this policy will describe that switch, and it will ship off until you opt in.