Known limitations
Locke does not screen everything yet. This is what it does not cover in this release, so you can plan around it. Where we plan to add something, we say so. We give no dates.
What Locke screens
Microsoft Copilot browser chat is not screened
The Locke extension does not screen Microsoft Copilot browser chat at copilot.microsoft.com. The browser chat uses a live connection (a WebSocket) that the extension cannot inspect yet, so what you type or say to Copilot is not checked for personal data and does not appear in your Privacy reports. Use another AI tool for sensitive work, or turn Copilot off on managed devices. GitHub Copilot in VS Code and Visual Studio is a different product and is screened. We plan to add this in a future release.
AI tools that send prompts in a binary format
AI tools that send prompts in a binary format, such as Cursor and Windsurf, aren't screened yet. What you send through them is not checked for personal data and does not appear in your Privacy reports. On AI services Locke screens, such tools are blocked. Use another AI tool for sensitive work. We plan to add this in a future release.
Perplexity desktop app file uploads
File uploads from the Perplexity desktop app aren't screened. We plan to add this in a future release.
Chat over live connections, and voice
Some AI sites send chat over a live connection (a WebSocket). Locke cannot read those, so it lists them as not screened and gives them no switch. Voice and realtime modes are not screened either, even on services where typed chat is, ChatGPT voice mode included. We plan to add this in a future release.
Browsers without the Locke extension
Web AI sites such as chatgpt.com and claude.ai are screened by the Locke browser extension. In a browser that does not have the extension, those sites are not screened, and neither are AI services Locke does not recognize. A program renamed to look like a browser is treated the same way. Teams admins can install the extension on every member's browsers with a browser policy (force-install).
Apps and connections that go around Locke
On Linux, Locke covers secure web traffic on the standard port (443) from programs running directly on the computer. Connections on other ports, through a VPN or tunnel, or from containers and virtual machines are not covered. On Windows, Locke covers apps that follow the Windows proxy setting. Apps that ignore it, including many Java programs and Microsoft Store apps, can go around Locke.
Apps that use only Windows' own networking
On Windows, a few apps send traffic only through Windows' own system networking (WinHTTP) and ignore the proxy setting; Locke doesn't screen those apps. We plan to add this in a future release.
Programs that were already running (Windows)
On Windows, a program that was already running when protection started may keep using its old connection until you restart it. Restart the program after you turn Locke on.
AI models on your own computer
Models that run on your own computer, such as Ollama and LM Studio, aren't screened by default. Their traffic never leaves the computer. A client you point at Locke's local proxy is screened.
Screening happens when you send, not as you type
Locke screens a message at the moment it is sent. It does not watch your keystrokes while you type. We plan to add this in a future release.
Files and images
Files Locke cannot read are blocked
Locke reads plain text, code, CSV, JSON, Markdown, log and RTF files, and PDF, Word, Excel and PowerPoint files. It cannot read Apple iWork files (Pages, Numbers and Keynote), archives such as zip, tar, 7z and rar, SQLite databases, Outlook mail, video, other images such as HEIC, TIFF and BMP, or other binary files, so it blocks the whole request rather than guess, and tells you the file was not sent. A file renamed to look like text is judged by what is inside it. We plan to add this in a future release.
Images are not screened
Images and screenshots you send to an AI service aren't screened, and NSFW filtering isn't in this release. An image is sent as it is unless you or your Teams admin set images to Block. We plan to add this in a future release.
Voice and audio are not screened
Voice and audio you send to an AI service aren't screened; Teams admins can block audio uploads. We plan to add this in a future release.
Photo metadata is not removed
Photo metadata, such as location, isn't removed from pictures you send. We plan to add this in a future release.
Large requests are blocked
A request too large to screen is blocked, not sent unscreened. The message says it is a size limit and not a sensitive-data decision. On AI services Locke does not recognize, an upload over the limit may be sent without being read unless you set a rule for that service.
Computers Locke runs on
Windows and Linux only
Locke runs on Windows and Linux. It is not available for macOS. We plan to add this in a future release.
Teams and settings
Strictness for images, files and audio
Strictness levels apply to text. Files are screened the same way for everyone, images and audio are not screened, and none of them has a strictness setting. We plan to add this in a future release.
Members' figures are not sent to admins automatically
Admins see a member's figures only when they request a report and the member sends it. Nothing is sent automatically. We plan to add this in a future release.
No single report for the whole team
Each report covers one device. There is no combined report across the team yet. We plan to add this in a future release.
Custom rules
You cannot write your own detection rules yet. The Never flag list takes plain words and phrases only, not patterns. We plan to add this in a future release.
Detection models matched to your hardware
Locke uses the same detection models on every computer. Choosing a model tier to match a computer's hardware is not available. We plan to add this in a future release.
For Teams admins
- Force-install the Locke extension on every member's browsers with a browser policy. Locke does not do this for you, and a member can remove the extension unless your policy installs it.
- The Locke extension does not screen Microsoft Copilot browser chat at copilot.microsoft.com. Use another AI tool for sensitive work, or turn Copilot off on managed devices.
See also Trust, Pricing and Downloads. Questions? Write to info@sonomos.ai.
