---
title: Extensions
sidebar:
  label: Overview
description: Optional add-ons that record AI sessions, keep them in your own cloud, and connect your identity provider.
---

_[console.superalign.ai/extensions](https://console.superalign.ai/extensions)_

Think of Surface as a base product with add-ons. Each add-on is a switch. Everything is **off** until an Owner or Admin turns it on, and every change is written to the audit log.

Extensions come in two families, and the console groups them the same way.

| Family | Runs on | Groups |
| --- | --- | --- |
| [Endpoint extensions](/surface/extensions/endpoint/overview) | Enrolled laptops | [Prompt collectors](/surface/extensions/endpoint/prompt-collectors/overview), which record sessions from one AI tool each |
| [Cloud extensions](/surface/extensions/cloud/overview) | SuperAlign's backend | [Prompt stores](/surface/extensions/cloud/overview), which keep sessions in [S3](/surface/extensions/cloud/s3) or [Splunk](/surface/extensions/cloud/splunk), and [cloud sync](/surface/extensions/cloud/cloud-sync), which pulls sessions from cloud AI products |

```mermaid
flowchart LR
  subgraph endpoint["Endpoint extensions"]
    P[Prompt collectors<br/>Claude Code, Codex, Chrome]
  end
  P -->|sessions| S[Surface]
  X[Cloud AI products<br/>Copilot Studio, Cursor Cloud]
  subgraph cloud["Cloud extensions"]
    Y[Cloud sync]
    C[Prompt stores<br/>S3, Splunk]
  end
  X --> Y --> S
  S --> C
  I[Google Workspace,<br/>Entra ID, Okta] -->|users and groups| S
```

**Integrations** sit outside both families. They carry no session data — they keep your user list in step with your identity provider.

<CardGroup cols={2}>
  <Card title="Endpoint extensions" href="/surface/extensions/endpoint/overview" icon="laptop">
    Run on laptops. Each one records sessions from one AI tool: Claude Code, Codex, or AI websites in Chrome.
  </Card>
  <Card title="Cloud extensions" href="/surface/extensions/cloud/overview" icon="cloud">
    Keep session data in storage you own, and pull sessions from AI products that never touch a laptop.
  </Card>
  <Card title="Integrations" href="/surface/extensions/integrations/overview" icon="plug">
    Keep your user list in sync with Google Workspace, Microsoft Entra ID, or Okta.
  </Card>
</CardGroup>

## Who can change them

Owners and Admins. Everyone else sees the page read-only.