Watermark overlays
Watermarks make screenshots and screen sharing attributable to the active session.
Visible accountability
Make sensitive app sessions visibly accountable
When support contractors or temporary teams view customer data, a visible watermark and browser-level content controls change the handling behavior. The goal is deterrence and accountability inside the managed session.
These controls are not DLP. They cannot stop a phone photo, external camera or every operating-system capture path.
Dynamic session watermarkCopy and print controlsDownload deterrenceKnown screenshot-attempt friction
Human-visible control
Users know the session is accountable
A support contractor sees their name, email, workspace and session context in the watermark. That does not replace legal or DLP controls, but it gives the session a clear owner.
Copy and print friction
The browser session can discourage casual copying and printing where the protected app policy requires it.
Download handling
Downloads can be constrained for protected app sessions without full file-content classification.
Operational use
Use it for temporary and external access
Content protection is most useful where the app is sensitive and the user is not a fully managed employee device: support desks, auditors, integrators and short-term operational teams.
- Apply per app or policy, not as a blanket promise.
- Keep audit events and user-visible copy aligned.
- Use DLP, MDM or VDI integrations when the requirement is hard data-loss prevention.
Current boundary
Deterrence, not absolute data-loss prevention
The controls make mishandling harder and more attributable inside protected browser sessions. They do not prevent every capture path and should not be described as a complete DLP or endpoint-control system.
- Some screenshot paths can still exist.
- This is not DOM surveillance or an advertising script.
- Legal, DLP, VDI and managed-device controls still apply where required.
Next step
Review the rollout details before turning it on
The documentation page shows what to configure, how to verify the setup and which operational boundaries to review before rollout.