Northwind
Your workspace
- SAL-LAP-1201Reporting
- FIN-DES-0088Reporting
- DSG-LAP-0312Reporting
Security
Security and data protection
Signed agents, encrypted transport, one-time enrolment, tenant-scoped access and row-level isolation protect the path from endpoint collection to API response.
HTTPS, TLS 1.2 or newer
Enrolment key used once
Audited access
A second workspace
Not yours
No devices in view. A query without this workspace context is designed to return nothing.
Agent and check-in
Enrolment uses a short-lived key shown once and redeemed once. Traffic uses HTTPS with TLS 1.2 or newer. Each installation receives its own renewable device identity.
Collection
Inventory and aggregate app-level usage only. No window titles, URLs, keystrokes, documents or screen content. The agent does not offer inbound remote execution.
Tenant isolation
Application requests carry tenant context into a non-owner database role. Row-level security defaults to deny and cross-tenant paths are covered by automated isolation tests.
API credentials
Access keys are scoped to one tenant, stored as hashes and audited. Webhook events are signed, retried and support secret rotation.
Renewal notices
A scheduled notice is a sign-in link. The message does not include a product name, a price, a seat count, or an attachment.
Operational controls
Health, freshness, certificate expiry, queue age and sync gaps feed monitored operational workflows and documented recovery procedures.
Privacy
What is collected, and what is not
See the data SeatRova collects, the data it excludes, and how usage evidence is handled.