What AstraLink DLP is

AstraLink DLP prevents sensitive data — Social Security numbers, credit card and bank account numbers, credentials and API keys, client PII, financial records — from leaving your organization’s Macs through the everyday channels people actually use:

• Copy-paste into AI chatbots, webmail, messaging apps, and desktop applications. Classification runs the moment something is copied; enforcement (redact, block, warn) is applied where it is pasted.
• File uploads and web traffic, through a local TLS-inspecting proxy on each device. An upload of a spreadsheet full of client SSNs to a personal Drive is seen — and can be blocked — on the device, before it leaves. See Why interception.
• The browser itself, via an extension that can redact form fields before submission and cover traffic the proxy structurally cannot see.

Three principles

Everything you will see in the admin console follows from three design decisions:

Policy follows the person, not the machine. You assign a policy template to an employee; every device of theirs enforces it automatically. There is no per-device policy to keep in sync.

Enforcement is destination-aware. A client SSN pasted into your internal CRM and the same SSN pasted into ChatGPT are different events. Rules are written as data type × destination → action — see Writing rules and Destination groups.

Statuses are self-reported and rendered honestly. Agents report their own health. A device that has gone quiet shows Unknown — never a reassuring green it hasn’t earned. When you see Unknown, the honest answer is “we don’t know,” and the fix is getting the device to report. The full badge vocabulary is in Device statuses.

Platform support

The agent runs on macOS. Windows support is a separate, in-progress workstream. iOS and Android are out of scope — see Limitations for why, and for everything else you should know before promising coverage to your auditors.

Where to start

If you are setting up a new organization, the Quickstart walks the whole path in six steps. The rest of these docs are reference — deep pages you can link to and come back to.