Is Nightfall DLP for Browsers safe?

Nightfall DLP monitors clipboard, file uploads, and email content across every site to enforce an organization's DLP policies.

This is an enterprise data-loss-prevention tool that, by design, watches what users copy, paste, and upload on all websites and relays those events to a Nightfall agent running on the local machine over a localhost WebSocket. It reads Gmail message bodies and attachments through the user's Google OAuth token and sends them to Nightfall's encryption API (extension.nightfall.ai) for its encrypted-email feature, and on AI sites like ChatGPT, Claude, and Perplexity it reads the signed-in account email to attribute events to a user. These monitoring behaviors are the product's purpose, deployed by an organization rather than chosen by an individual user.