How to choose a trustworthy AI Chrome extension for your CRM
A Chrome extension that works inside your CRM can see everything you can see there, including customer names, phone numbers and notes. Before you install one, check these things. They apply to every tool, and we hold ours to the same list.
1. Who made it, and can you reach them?
Look for a named company, a working privacy policy, terms, and a support contact. If you cannot find who is behind it, stop.
2. What permissions does it ask for?
An extension should ask only for the access it needs. Check the permissions it lists before you install it, and grant access only to the sites you need. Access to "all websites" for a tool meant for one CRM deserves a question. Ask the vendor why, and check what you can change in Chrome's extension settings afterwards.
3. What data leaves your browser, and where does it go?
Ask three things. Which parts of the page are sent? Which AI provider receives them? How long is anything kept? A clear answer is a good sign. Vague answers are not.
Hold kmand to the same questions. Our privacy notice says what we send and to whom, and we are still reviewing parts of it, so read it rather than rely on a summary here.
4. Does it ask before it changes things?
Try a harmless task. See whether it shows the exact change and waits for your click before it edits a record. It should wait before actions it recognises as sensitive, such as deleting, sending or publishing, and it should refuse steps it recognises as payments. No extension can see everything a website does behind a button, so check each approval, and ask each vendor what it cannot catch. The AI should never be able to approve its own steps.
5. Does it ever type secrets?
An extension should not type passwords, card numbers or one-time codes for you. If it offers to, walk away.
6. What happens when the page changes?
CRMs change layout often. A trustworthy tool stops and asks if the page changed while it waited for you. A careless one keeps clicking.
7. Is there evidence it works?
Marketing pages say "works with every CRM". Look for tested results: which CRM, which tasks, what failed. A vendor that publishes its failures is easier to trust than one that publishes only wins. Here is what we have and have not tested.
8. Can you stop it and leave?
Check for a stop button that works mid-task and a clear way to cancel. Uninstalling removes the extension and what it stored in your browser. It does not necessarily erase anything the vendor or its AI provider already received, so ask each vendor how long it keeps data and how to request deletion.
A quick test you can run
- Make a test contact with your own email and phone number.
- Ask the tool to do something small to that contact only.
- Watch whether it asks first, shows what it changed, and tells the truth about whether it worked.
- Only then use it on real records.
Where kmand stands
kmand is in private testing and is not yet listed in the Chrome Web Store. We will say so on this page until that changes. Check us against the list above.