Isolation
Pooled multi-tenancy with a mandatory application-layer tenant guard and per-tenant encryption keys. Enterprise may wrap the tenant key with its own key; Precyz never takes custody of a customer root key.
SECURITY
Security controls and their evidence.
Tenant scope is derived server-side from the signed-in principal. Release artefacts are signed, client permissions are published, and destination addresses never appear in application logs.
Trust version 2026.11.3 · generated 2026-11-14T09:12:04Z
Proof
What this page is for
A tool that watches network activity should be the most transparent thing you install. Controls are listed with the artefact that substantiates them.
Tenant scope is derived server-side from the signed-in principal or the device certificate and is never trusted from client input. Destination addresses never appear in application logs.
On this page
What you get from this
In transit and at rest
TLS 1.3 in transit with HSTS preload. At rest, envelope encryption with a per-tenant key-encryption key.
Device identity
An install token is exchanged once for a device key pair generated on the device. The device then presents a client certificate, rotated on a published interval.
Build provenance
Signed artefacts and published provenance. Verification instructions are on the download pages so you can check a build yourself.
Collection boundary
The boundary
We observe here
Byte and packet counts, protocol, an encryption indicator, destination country, network operator, registrable domain, the app or browser that opened the connection, timestamps, and direction.
We never collect here
Communication content, URLs, paths, query strings, DNS names beyond the registrable domain, headers, cookies, tokens, files, screenshots, form data, keystrokes, usernames, email addresses, hardware serial numbers, or precise location.
Coverage is not complete. Some traffic paths are not observable from the interfaces we use, and geolocation is advisory rather than authoritative.
We do not claim a certification we do not hold. See the certification status page for the current, dated position on every audit and assessment.
Availability across plans
Personal
Included
Pro
Included
Team
Included
Enterprise
Included