Extensions
Optional add-ons that record AI sessions, keep them in your own cloud, and connect your identity provider.
console.superalign.ai/extensions
Think of Surface as a base product with add-ons. Each add-on is a switch, and only an Admin can flip it. The two families start from opposite ends:
- Endpoint extensions start on. Recording begins as soon as a laptop enrols, and you turn off what you do not want.
- Cloud extensions and integrations start off. They need credentials, so nothing happens until someone configures one and enables it.
Every change is written to the audit log.
Extensions come in two families, and the console groups them the same way.
| Family | Runs on | Groups |
|---|---|---|
| Endpoint extensions | Enrolled laptops | Prompt collectors, which record sessions from one AI tool each |
| Cloud extensions | SuperAlign’s backend | Prompt stores, which keep sessions in S3 or Splunk, and cloud sync, which pulls sessions from cloud AI products |
Integrations sit outside both families. They carry no session data — they keep your user list in step with your identity provider.
Endpoint extensions
Run on laptops. Each one records sessions from one AI tool: Claude Code, Codex, or AI websites in Chrome.
Cloud extensions
Keep session data in storage you own, and pull sessions from AI products that never touch a laptop.
Integrations
Keep your user list in sync with Google Workspace, Microsoft Entra ID, or Okta.
Who can change them
Admins. Everyone else sees the page read-only.