Zero Prompt Content
We do not need a copy of the blocked content to record that policy worked.
Redirective processes necessary tenant, device, user, policy, health, and event metadata. “Zero Prompt Content” describes what the SaaS control plane is designed not to receive—not an inaccurate claim that the service knows nothing.
CONTENT BOUNDARYDESIGN INTENT
Sensitive contentInspected and enforced locally
Security metadataTravels to the dashboard
The metadata path never needs prompt text, matched values, screenshots, or document contents.