Supported tools — version 1.4
In effect from 2026-10-13. Supersedes version 1.3. Previous versions remain available at /legal/supported-tools/versions/.

Supported tools

Aporta protects the five tools below, in the browser. It does not protect AI tools generally, and this page exists so that the boundary is a published fact rather than a sales answer.

On any other AI site, Aporta does not quietly fail — your organization’s policy decides whether you are blocked or redirected to a tool on this list.

On each of these, Aporta covers what you type into the message box, and restores your own values in what comes back so the answer is readable. Where your administrator has turned on attachment scanning, it also covers spreadsheets, Word documents and presentations you attach. PDFs and scanned images are not scanned.

On a personal computer, Aporta covers the browser profile the person signed in to Aporta with. It does not see or record anything in their other profiles, and they can remove it.

No activity in Aporta’s record means none was seen from a covered browser profile. It is not proof that none happened.

Microsoft Copilot is two different sites, and the browser matters

This is the one entry on the list where the answer depends on which browser you use, so it is stated rather than averaged.

• m365.cloud.microsoft and copilot.cloud.microsoft — the Microsoft 365 Copilot chat site, which Microsoft serves at both addresses. Covered in both Chrome and Edge.
• copilot.com — the consumer site, at the address Microsoft moves a signed-in session to from copilot.microsoft.com, in Chrome and in Edge. Covered in both Chrome and Edge from version 1.2.1 of the extension; earlier versions do not cover it.
• copilot.microsoft.com — the consumer site’s other address. Covered in Chrome. Not covered in Edge, because Edge does not permit any extension to run on it. That is Microsoft’s restriction on its own browser and there is no configuration that changes it.

If your organization standardizes on Edge and your people use the consumer Copilot site at copilot.microsoft.com, that use is not protected by Aporta. Blocking it is the control that works there.

Not covered

AI built into another application. Copilot inside the Word, Excel, PowerPoint and Outlook applications, and Einstein inside Salesforce, run outside the browser page a browser extension can reach. This is a boundary of the approach rather than a gap in this release, and no rollout or device-management tier closes it.

Anything a vendor hands off to another application. If an AI tool offers to open its answer in another product — an email it has composed, for example — what it hands over is the tokenized text it was given, and Aporta is not present in the destination to restore it.

Other browsers. Firefox and Safari are not covered.

Desktop AI apps. An AI tool’s own desktop application runs outside the browser, where the extension is not present.

Mobile. AI tools used on a phone or tablet, in an app or a mobile browser, are not covered.

Direct use of an AI vendor’s API. Requests sent to an AI vendor’s API, from code or from another product, do not pass through a browser page and are not covered.

How this page is kept true

The extension publishes the list of adapters it actually ships. A check runs in continuous integration comparing this page against that list, and fails the build if this page names a tool or a site the shipped extension does not carry, or omits one it does. A page claiming coverage the product does not have is not a stale page — it is a false statement about a security product.

Questions

[email protected]

Changelog

1.4 — 13 October 2026. “Organization” and “standardizes” are now spelled the US way. What is covered is unchanged.

1.3 — 6 October 2026. Adds copilot.com, the address Microsoft now moves a signed-in session on the consumer Copilot site to. It is covered from version 1.2.1 of the extension, in Chrome and Edge; earlier versions do not cover it. copilot.microsoft.com is unchanged: covered in Chrome, not in Edge.

1.2 — 27 September 2026. States what is covered on a personal computer and what an empty record means, and adds other browsers, desktop AI apps, mobile and direct API use to Not covered.

1.1 — 18 September 2026. Adds copilot.cloud.microsoft, a second address Microsoft serves the Microsoft 365 Copilot chat site from. It is covered from version 1.0.0 of the extension, in Chrome and Edge; earlier versions do not cover it.

1.0 — 4 September 2026. First published list.