What our tools collect, who can see it, who responds when something happens, and what is ours to do and what is yours. The same points go into every written scope before work starts.
Endpoint Defense installs three agents on each covered Windows or Mac computer. Here is what each one sees.
Read documents, drafts, notes, email, or messages. Record the screen or webcam. Log keystrokes. Track physical location. Inspect the contents of encrypted web traffic.
Domain-name logs show which websites a computer visited, which can be sensitive for reporters and advocates. Remote-access tools on the device-management platform can open a session on a computer. We state in writing when remote access is enabled, require your approval to use it, and log every session.
Rafael Gutierrez and anyone named in your scope. Access is protected with hardware security keys and reviewed when the scope changes. We do not browse data without a reason tied to protecting your computers.
NinjaOne, Huntress, and DNSFilter process the data described above on their own infrastructure under their own privacy and security terms. Huntress analysts see activity on a computer when they investigate an alert. We share their current terms during the Baseline Review.
We do not sell, share, or disclose your data to third parties, funders, or partners. If we receive a legal demand we will notify you unless we are legally barred from doing so. Retention periods for each log are written into your scope.
Watches covered computers around the clock. When a real threat is confirmed, analysts can isolate the computer from the network immediately to stop the spread, then send us a written report with cleanup steps.
We review alerts, updates, and coverage during business hours (Pacific time), contact your named person about anything real, explain what happened in plain language, and coordinate cleanup. Confirmed incidents get a call the same business day. Specific response times are written into your agreement.
Install and operate the tools. Keep covered computers updated. Watch for threats and coordinate response. Block malicious websites. Tell you when a computer has dropped off or needs attention. Report monthly. Remove everything cleanly if you leave.
Name one person we contact. Tell us when staff join or leave and when computers are added or retired. Let updates and reboots happen when scheduled. Get agreement from owners of personal laptops before we install. Decide on anything we flag that needs a decision.
Security trainings help teams understand risk and make a plan. Helplines step in when something is already on fire. We run the protection in between: keeping the computers patched, monitored, and protected every day so the plan keeps working after the workshop ends.
If you are mid-incident and not a client, start with the Access Now Digital Security Helpline or the Digital First Aid Kit. Email us as well. We reply within one business day.