1. A method, comprising: receiving a request from a host operating system outside a virtual machine for access to a data from a browser within the virtual machine; evaluating a criterion of a policy to determine whether to permit the access to the data, wherein the evaluating is performed in response to a determination that a master image is not available, the master image corresponding to a version of the virtual machine; downloading the browser, in response to a determination that the browser is not being used; comparing the browser to the master image to determine if the browser is current; updating the browser if the browser is determined, based on the master image, to not be current, wherein the browser is part of an application suite wrapped in the virtual machine; and creating a buffer for manipulating the data within the virtual machine, based on the criterion of the policy, wherein the buffer cannot be accessed by the host operating system.