Trust center
What the agent collects, where it goes, and how long we keep it.
Data the agent collects
| Category | Examples | Retention |
|---|---|---|
| Device identity | Hostname, hardware identifier, OS build | Until device removal |
| Inventory | Installed packages, patch level, disk health | 90 days rolling |
| Task output | Exit codes, command output | 30 days |
| Backups | File snapshots (Pro + Backup only) | 30 days rolling |
Data we do not collect
The agent does not capture keystrokes, screen content, browser history, or personal files outside the configured backup paths. It does not run a remote shell that bypasses console approval.
Encryption
All traffic is TLS 1.2 or later. Backups are encrypted with per-organization keys before leaving the device. Console sessions use short-lived tokens.
Subprocessors
We use third parties for cloud hosting, transactional email, payment processing, and status monitoring. A current list with regions and purposes is available on request from security@slatefield.org.
Access
Slatefield staff access customer data only with written approval from the customer, except where required by law. Access is logged and reviewed monthly.
Security contact
Report a vulnerability to security@slatefield.org. See security.txt for our policy and disclosure timeline.
Status
Live availability and incident history: status.slatefield.org.