Detections
Analytics
2.91 (L1) Ensure 'Allow Translator API' Is Disabled
Information
This setting controls access to the built-in, client-side browser translation APIs within Google Chrome. The TranslatorAPIAllowed policy in Chrome enables or disables the built-in, on-device AI Translator API. This feature allows websites to translate text directly within the browser using AI models, rather than relying on cloud-based services.Allowing unrestricted access to translation APIs exposes corporate data assets to data leakage and compliance risks. When web applications automatically or programmatically invoke the browser's translation infrastructure, local page contents, text inputs, and proprietary data blocks are fed into the translation engine parsing pipeline. Even if processing layers occur on-device or utilize local model deployments, leaving this interface open increases the active software attack surface, risks local data scraping, and introduces unpredictable telemetry transmissions or out-of-boundary string caching. Restricting this API enforces strict boundary control over corporate data text handling inside the browser context.
Solution
To establish the recommended configuration via Group Policy, set the following UI path to Disabled: Disallows the use of Translator API :Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Allow Translator API.
Impact:
Web applications and extension scripts will be completely blocked from calling Chrome's internal Translator script APIs to convert on-screen text. End-users who require cross-language translation tasks must manually use vetted, independent web platforms or organization-sanctioned enterprise translation solutions.
See Also
Item Details
Audit Name: CIS Google Chrome Group Policy v1.1.0 L1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2
Plugin: Windows
Control ID: 493c596d23522e6a648ba1d62f177f7788da2e242ef131e0774a92d82c88fd0f