Product privacy and access controls
Self-hosted deployment separates risk detection from permission to view content. The product is designed for overt, authorized workplace monitoring.
- Organization-owned devices and accounts, subject to policy and employee notice.
- No keystroke capture or screen recording, according to the product specification.
- Least-privilege access, a reason for viewing content and an access record.
- Encryption of content and files at rest and in transit.
System components and licence verification operate locally. Using an external AI service still requires communication with that service; approved data may be sent according to policy.