Below are ways we help protect your privacy, while still retrieving the data necessary to manage your account and analyze productivity
Sensitive data protection
Prevent exposure of private and sensitive data
Multiple role-based access configurations
Protect confidentiality with customizable user permissions and settings
Non-business activity excluded in Insights
Removes all non-business domain names/titles/URLs
Anonymized & Aggregated data when appropriate
Preserve confidentiality and privacy
Report Subscriptions & Sharing
Promotes visibility and transparency into data intelligence
Personal insights report subscription
Encourage self awareness & improvement with access to own data insights
Protect against data security risks
With certified SOC 2 Type I & 2 compliant platform
Audit Logs
Enable detailed investigation & scrutiny of recorded activity
Security Alarms & Domain blocking
To flag and prevent compliance violation
Configurable Website Classification
Ensures accurate data measurement
Data Recovery & Retention Policy
Allows organizations complete control to all active account data
Schedule Working Hours
Limits data collection to pre-set work hours
Do not Track List
Disables all data collection for users on this list
No Video Monitoring & key logging
To prevent intrusive monitoring
Screenshots turned off by default
To prevent intrusive monitoring
Learn more about our latest Data Privacy Controls to determine the configuration level that’s right for your organization.
Security
Robust safeguards and controls ensure Security and Compliance
ActivTrak is committed to delivering innovative technology and powerful insights to help manage the modern day workforce, in a smart, ethical and secure manner that leads to successful business outcomes and a positive employee experience.
We regularly test our infrastructure and applications rigorously to isolate and remediate vulnerabilities. We also work with industry security teams and third-party specialists to keep our users and their data safe. ActivTrak is a certified SOC 2 Type I & 2 compliant solutions provider, with multiple layers of protection across a distributed, reliable infrastructure. All ActivTrak data is stored in a secure data warehouse managed and secured by Google Cloud Platform (GCP)
Learn about our responsible disclosure program
Data Collection
Data is encrypted in transit – all account information is encrypted in transit and stored in a secure data center hosted by Google Cloud Platform (GCP).
- Encrypted connection protocols included HTTPS and SSL/TLS.
- Communication between ActivTrak cloud and the agent uses HTTPS/TLS with AES-128 encryption.
- Mutual authentication is provided by a combination of digital certificate and per-instance shared key, which is created during deployment.
Data Storage
Data is encrypted at rest – we use several layers of encryption to protect customer data at rest in Google Cloud Platform (GCP).
- Data stored within the cloud is stored using AES-256 encryption.
- Data is automatically encrypted prior to being written to disk.
- All data, including screenshots, and activity logs, are split into discrete blocks which are encrypted.
Identity Authentication
ActivTrak complies with your organization’s authentication security standards and protocols.
- We support single sign-on (SSO) and Multi-factor authentication (MFA).
- When SSO and/or MFA is enabled, we delegate the user authentication process to identity providers that support the Security Assertion Markup Language (SAML) 2.0 standard.
- We have certified SSO for the following identity providers: Okta, Azure AD, OneLogin, and Google Suite.
