Live demo

The AI Flight Recorder

One person uses three AI tools before lunch — Claude in the browser, the ChatGPT desktop app, Copilot inside Microsoft 365. Watch every session land on one recorder, each tied to a named owner — then a leak stopped at the wire.

Different surfaces, different sensors — browser and desktop both feed the same timeline.

Every line is attributed to a person and a device, not an IP or an API key.

Policy runs on the wire: the sanctioned tools flow, the unsanctioned egress is refused at connect time.

5 acts · ~90 sec

Synthetic data — Viskor never shows customer traffic in demos.

maya-mbp 3 AI surfaces · browser + desktop

Viskor AI Flight Recorder · browser + gateway sensors

AI Flight Recorder live · all surfaces

09:41:02 Browser sensor anthropic · Claude ● live

web · claude.ai · prompt “rewrite the Q3 board summary…” · 1,180→640 tok

09:43:37 Gateway sensor openai · ChatGPT ● live

desktop app · POST /v1/chat/completions · gpt-4o · 2,090→910 tok

09:46:11 Browser sensor microsoft · Copilot ● live

M365 · substrate.office.com Chathub (WebSocket) · “summarise this thread”

Attributed3 surfaces → 1 person

Maya Chen · maya-mbp 10.14.2.44

SSO okta:maya.chen dept Finance device managed named owner — not an IP

Session graphone thread of work

Person: Maya Chen
Session: fr-7f2a…c19
Surfaces: browser · desktop · M365
Providers: anthropic · openai · microsoft
Sensors: browser · gateway
Window: 09:41–09:47 · 6 calls

Policy match · blocked HTTP 403

Policyblock-consumer-ai-egress

Destinationchat.openai.com — consumer, unsanctioned

Triggerpasted customer list · 214 rows PII

ActionBLOCK at connect — no bytes left the device

Recordedaudit

✓Tamper-proof record · audit-ready

✓Every call written to the recorder · Maya Chen · 6 sessions

✓Stayed in-boundary · in your region, self-hosted

sha256 8b1d…a4f0 · 2026-08-17T09:47:52Z

Act 1

The takeaway

Every AI your people use, on one timeline

"Every prompt — attributed to a named owner, governed, and provable. On one recorder."

Browser or desktop, Claude, ChatGPT or Copilot — it all lands on the Flight Recorder. Each line has an owner, the working session is one thread, and the leak was refused before a byte left the device. Self-hosted, inside your boundary.

Book a walkthrough See the shadow-agent demo →