Northwind
Your workspace
- SAL-LAP-1201Reporting
- FIN-DES-0088Reporting
- DSG-LAP-0312Reporting
Security
Security and data protection
Your inventory stays private to your organisation. Smantix collects only what it needs, keeps each customer's data separate, and protects it from the device all the way to your reports.
Encrypted in transit
Each customer kept separate
Access is recorded
A second workspace
Not yours
No devices in view. A query without this workspace context is designed to return nothing.
Only your devices can join
Each device joins with a one-time key and talks to Smantix over an encrypted connection. The key is short-lived and shown once, traffic uses TLS 1.2 or newer, and each installation gets its own renewable identity.
Collects only what it needs
Inventory and aggregate app-level usage only. A small helper in the signed-in session reports which application is in front and for how many seconds, with idle and locked time left out. No window titles, URLs, keystrokes, documents or screen content. Person names stay hidden until an audited admin reveal. The agent does not offer inbound remote execution.
Your data is kept separate
Every request is limited to your organisation's workspace. Underneath, the database refuses another customer's rows by default, and automated tests check that access across customers is refused.
Safe connections to your tools
Access keys only read your workspace, are stored as hashes and every use is recorded. Webhook events are signed, retried and support secret rotation.
Renewal emails reveal nothing
A renewal reminder is a short message and a sign-in link. No product names, prices, seat counts or attachments sit in anyone's inbox.
Monitored and recoverable
We monitor that devices are reporting, certificates are current and data is flowing, and follow written recovery procedures when something goes wrong.
Security at a glance
| Control | Smantix |
|---|---|
| Transport | HTTPS, TLS 1.2 or newer |
| Agent enrolment | Short-lived key, shown once, redeemed once |
| Device identity | A renewable identity for each installation |
| Inbound remote execution | Not offered |
| Tenant isolation | Tenant context on every request, row-level security default deny, automated cross-tenant tests |
| API keys | Tenant-scoped, stored as hashes, audited |
| Webhooks | Signed, retried, secret rotation |
| Support access | Scoped, time-bound and audited |
Privacy
What is collected, and what is not
See the data Smantix collects, the data it excludes, and how usage evidence is handled.