Allowlist

Browser extension allowlist

A simple approval record for AI browser extensions that can read pages, tabs, clipboard data, or SaaS apps.

Copy template Read the browser extension checklist

Use For

Make the template part of an approval workflow.

Copy it into your internal wiki, ticket system, or policy document. Replace bracketed placeholders before sharing it with employees or customers.

Template handling rules

Do not paste real secrets, customer records, or private keys into the template.
Assign an owner and review date before relying on it.
Use the linked guide when the decision needs more context.

Copyable Template

Browser extension allowlist

AI Browser Extension Allowlist

Owner: [Name]
Last reviewed: [Date]
Scope: [Company / team / role]

Approved extensions

| Extension | Vendor | Approved roles | Allowed sites | Blocked sites/data | Permissions reviewed | Review date | Owner |
| --- | --- | --- | --- | --- | --- | --- | --- |
| [Name] | [Vendor] | [Roles] | [Domains] | [Data/sites] | [Yes/No] | [Date] | [Name] |

Approval questions
- What browser permissions does the extension request?
- Can it read or change data on all websites?
- Can it access Gmail, Docs, Drive, CRM, support tools, calendar, clipboard, or browser history?
- Does it send page content, prompts, screenshots, or metadata to an external service?
- Is there a business reason for each approved role?
- Is there an admin console, audit log, or enterprise policy control?

Default rules
- Block extensions that request broad access without a clear business need.
- Block use on payment, HR, legal, customer data, credential, and admin-console pages unless separately approved.
- Remove access during offboarding.
- Review the allowlist every [30/60/90] days.