Encryption and Security at Every Layer

Encrypted at Rest

The agent’s local database is AES-256 encrypted with machine-bound keys. The database is unreadable on any other computer, even with physical disk access.

Encrypted in Transit

All data is double-encrypted: application-layer AES-256-GCM encryption on top of TLS transport encryption. Protected even if TLS is terminated at a load balancer.

Secured at Portal

Role-based access control, MFA on all accounts, CSRF protection, secure cookies, session regeneration, and full admin audit logging.

Key Management

Encryption keys are machine-bound and never stored in plaintext. Per-agent keys are derived cryptographically.

Role-Based Access Control

Role Capabilities
Viewer Read-only access to dashboards and monitoring pages. Cannot export data or manage users.
Manager Dashboard access plus data export (CSV, JSON, PDF, DOCX). Cannot manage agents or configuration.
Admin Full access: user management, agent configuration, data export, and organisation settings.

Multi-Factor Auth

TOTP authentication on all accounts. Trusted device management for reduced friction.

Admin Audit Trail

Every login, configuration change, user modification, and data export is recorded.

Data Retention

Configurable retention periods per organisation. Automatic cleanup of expired data. Legal holds available.

What the Agent Captures and What It Does Not

Captured

Application usage (names, window titles, duration)
Web browsing (URLs, page titles, visit duration)
Input activity counts (keystrokes and mouse clicks, not content)
Clipboard content type and text preview
File operation metadata on removable media (USB and portable storage)
Print job metadata
System events (logon, logoff, lock, unlock, startup, shutdown)
Process lifecycle information
Network and WiFi connection information
Bluetooth device connections
Camera and microphone usage metadata (not content or recordings)
Screenshots at configurable intervals (off by default)
AI prompt text and file uploads (off by default)
Geolocation data (off by default)
Every module can be individually enabled or disabled per agent. The administrator controls what is collected.

Never Captured

Email body content or attachments
Instant message body content (Slack, Teams, and other chat platforms)
Audio or video recordings from webcam or microphone
Keystroke content (only counts are recorded)
Document content from inside files
Form field content (passwords, credit cards, sensitive details)
The agent reads metadata about activity, not the content of communications, documents, or sensitive credentials.

Configurable Scope

Every module can be individually enabled or disabled per agent. Monitor only what your organisation needs.

Full Transparency

Methodology modals on every dashboard explain exactly how scores are calculated. No black boxes.

Tiered Access

Sensitive features like AI prompt capture and screenshots are only available on higher-tier plans.

Data Isolation

Dedicated per-organisation databases provide complete tenant separation. No shared data stores.