Privacy & data — Dashboard demo

This is a screen-recording product, so this is the first question. Every answer below is the same configuration that produced the figures elsewhere in this app.

What is captured

System events and user actions across the applications the team uses.
Which application and which screen, and the order things happened in.
How long each step took, including the waiting between steps.
Field labels and the structure of the data entered, for correlation.

Typing: Typing is recorded as "typed into Vendor name, 34 chars" — an aggregate, never the characters themselves.

What is never captured

Keystroke content — typing is aggregated, never logged verbatim.
Message text in chat or email bodies.
Personal application use — blocked at capture, never uploaded.
Screen content from password managers, banking and HR portals.

Masking is applied on the device, before upload. Original frames are not retained.

Every field in one captured event

Ten fields. There is no eleventh.

Field	Type	Example	What it is
`event_id`	string	`ev_8f31c04a`	Opaque per-event identifier.
`ts`	timestamp	`2026-07-13T10:24:07.412+02:00`	Millisecond precision with an explicit offset.
`device_ref`	string	`WIN-OPS-04`	The machine, not the person.
`user_ref`	string	`emp_4471`	Pseudonymous. No name, no email address.
`app_exe`	string	`erpclient.exe`	Foreground executable.
`window_title`	string	`Vendor invoice — posting`	Window caption, redacted before upload.
`action_type`	enum	`click`	One of eight verbs.
`target_control`	string	`Grid/Row[4]/VendorName`	Accessibility-tree selector path.
`url_host`	string	`erp.internal`	Host only for browser events — never the full query string.
`dwell_ms`	integer	`1420`	Time the control held focus.

click · keys · focus · scroll · paste · navigate · file_save · print

Applications blocked at the device

1,339,834 signals dropped before upload — 2.7% of everything the agents saw.

Category	Applications	Signals dropped	Share
Password managers	1PasswordBitwarden	401,950	0.81%
HR and payroll portals	HR portalPayroll (web)	361,755	0.73%
Online banking	Bank (web)	321,560	0.65%
Personal mail and messaging	Personal webmailWhatsApp Web	254,569	0.51%
Private mode (policy)	—	496,235	1%
Paused by the person at the keyboard	—	198,494	0.4%

Values masked before upload

9,847 values masked on the device. Original frames are not retained.

Class	Values masked	Share	Detector
Email address	3,912	39.7%	Regex plus domain validation
National tax id	2,318	23.5%	Checksum-validated pattern
Phone number	1,641	16.7%	E.164 and local formats
IBAN	1,204	12.2%	Checksum-validated pattern
Card number	486	4.9%	Luhn check
Free-text note	286	2.9%	Named-entity model

138 redactions (1.4%) were reclassified on review. The detector is a model, not a rule set, and it can miss a value or mask one that did not need masking. Exceptions

Who can see what

Roles are configured per deployment; this is the default matrix.

Role	Can see	Cannot see
Person being recorded	Their own recording, their own captured frames, the pause control, and this page.	Anyone else's recording, and any per-person ranking — none is computed.
Department manager	Process and department figures, and which computers are reporting.	Individual recordings, frames, or any figure attributed to one named person.
Process analyst	Every recording, every frame, the resolved-action stream and the pipeline thresholds.	Change a threshold without it appearing in the audit log below.
Works council / employee representative	This page, the blocklist, the masking classes and the full audit log.	Nothing is withheld; the same audit log is served to every role.

Retention clock

Nothing is kept indefinitely. Each row is a hard delete, not an archive.

What	Kept for	Then
Original screen frames	Not retained	Masked on the device; the original never leaves it.
Masked frames	30 days	Deleted. The figures derived from them survive; the images do not.
Raw signals	7 days	Deleted after resolution into actions.
Resolved actions	90 days	Deleted. Activity instances and cases are kept.
Cases, variants and process models	24 months	Deleted, or exported on request.
Audit log	Life of the deployment	Append-only; entries are never edited or removed.

What your employees see

The agent is not silent, and it is not hidden.

A tray icon that is always visible while the agent is running.
A pause control that stops capture immediately, with no reason required — used 198,494 times in this window.
A notification when a blocked application takes focus, saying capture stopped.
Their own recordings, their own frames, and this page — the same page you are reading.
No score, no ranking, no per-person efficiency figure. None is computed anywhere in the product.

Synthetic demo frame · fields masked at capture; originals are not retained.

Audit log

Append-only. Every threshold, blocklist and model change that shaped the figures in this app.

When	Who	What changed
13 Jul 2026 09:12	Analyst · emp_4471	Reference model v3 pinned for conformance checking on all 14 processes.
11 Jul 2026 16:40	Analyst · emp_2210	Draft automation “Employee record change” approved for build.
09 Jul 2026 11:05	Administrator · emp_1002	Blocklist: “Payroll (web)” added to HR and payroll portals.
07 Jul 2026 14:22	Analyst · emp_2210	Idle-gap threshold changed from 120 s to 150 s for session segmentation.
05 Jul 2026 10:31	Works council representative	Read the full audit log and the masking class table. No change requested.
02 Jul 2026 09:48	Analyst · emp_4471	Quarantine cut-off raised from 0.65 to 0.70 resolution confidence.
28 Jun 2026 15:19	Administrator · emp_1002	Masked-frame retention shortened from 60 days to 30 days.
26 Jun 2026 12:03	Analyst · emp_2210	138 masking decisions reclassified on review; corrections logged, not applied silently.
24 Jun 2026 17:55	Administrator · emp_1002	Recorder agent rolled to 2.4.1 across 18 computers.
22 Jun 2026 08:37	Analyst · emp_4471	Noise threshold for activity abstraction set to 0.20.
20 Jun 2026 13:14	Analyst · emp_2210	Correlation key for “Employee record change” changed from ticket_id to employee_ref.
18 Jun 2026 10:02	Administrator · emp_1002	Capture window opened: 18 computers, 6 departments, 28 days.
16 Jun 2026 09:00	Administrator · emp_1002	Loaded hourly rate set to €25 and build day rate to €520 for every ROI figure.
16 Jun 2026 08:44	Works council representative	Capture scope and blocklist signed off before the window opened.
15 Jun 2026 16:20	Administrator · emp_1002	Keystroke-content capture confirmed disabled at the agent; typing is aggregated only.

Fifteen entries shown. The log is append-only and is served to every role, including employee representatives.

Every figure here is produced by an 8-stage pipeline and reconciled at build time. Correlation-key coverage 94.3% · fitness 0.81–0.94 · nothing on this page is 100%.

See how it works