You are being asked to let a tool near your registration data and to accept that a language model reads your study reports. Both deserve a specific answer rather than a reassuring one. Here is what is actually in place, and what we do not have.
The shortest part of any review is the attack surface that does not exist.
Standard controls, applied everywhere rather than where it was convenient.
The language model receives the study report and the field schema, and returns structured data. It has no network access to your systems, no credentials, and no way to trigger an action. What it produces is text until a person approves it.
Its output is validated against the IUCLID field schema for that endpoint, and anything outside the schema is reported rather than written. Then a qualified person reviews and approves. Only an approval produces a plan the extension will execute.
Drafting runs on Anthropic's commercial API, under terms that do not use your inputs or outputs to train models. Source reports are deleted from our storage once every endpoint they were tagged to has been resolved.
| Permission | What it is for |
|---|---|
| activeTab | Access to the one tab you clicked on, only on that click. This is what replaces a standing permission over your IUCLID address, which we deliberately do not hold. |
| scripting | Injects the two scripts that find the record and fill the form. IUCLID offers no write path the extension could use instead, which is the whole reason the form is driven directly. |
| storage | Holds one value: the token that authorises this browser to fetch your organisation's approved jobs. It never leaves the browser except to your own service. |
| sidePanel | The whole interface is a panel docked beside IUCLID, opened only by your click on the toolbar icon. It replaced a pop-up, which closed the moment focus moved and took a run in progress with it. Writing a record takes minutes, and you need to see which field is going in and be able to stop it. |
| notifications | One notification, raised only when a run finishes while the panel is closed, saying whether the record was written or needs you. If the panel is open, nothing is raised. Never used for marketing, prompts or re-engagement. |
| alarms | One recurring alarm at Chrome's one minute minimum, as a backstop for the background worker Chrome is entitled to suspend. It gives the extension a legitimate reason to wake and resume watching a run it has already started. It starts nothing on its own. |
| debugger | Used for exactly one action. IUCLID's "add new document" menu ignores scripted clicks, so one genuine click is dispatched at that one control and the debugger detaches immediately, with Chrome's own banner visible while it does. It is never used to read page content, network traffic or console output, and never attached to another tab. |
If your organisation runs a formal vendor assessment, we would rather answer it in writing, in this much detail, than have you take any of the above on trust. Send the form and we will return it completed, with the code references behind each answer.