What Openwake collects.
Openwake records which AI is used on your company's machines, from which kind of account, and what kind of data is involved. By default it keeps labels, never what people write. Here is what each part records, what stays on the machine, and the setting that changes it.
On company machines.
| What it records | What stays on the machine, by default |
|---|---|
| The machine: its name, operating system, hardware and security settings, and who is signed in | Nothing else about the machine. |
| AI tools installed and running, and the MCP servers each one is set up to reach | The contents of files and configuration. A provider's key is noted by name only, never its value. |
| Which AI providers the machine connects to | |
| Claude Code sessions: that a prompt or tool call happened, which service it went to, what kind of data was detected, and how much | The text of the prompt, the assistant's replies, and anything from before the sensor was installed |
In supported Chromium browsers, such as Chrome and Edge.
| What it records | What stays on the machine, by default |
|---|---|
| Visits to AI sites and known software providers, by domain | The page address, its title and its contents. Other sites are not sent, and never kept, unless an owner chooses "All sites, domain only". |
| On AI sites, whether a personal or a company account is in use | |
| On AI sites, the kind of data pasted, attached or submitted: a credential, contact details, source code, and so on. Worked out on the device. A large or sensitive paste is noted when it is pasted, whether or not it is then sent | What was written. Nothing is read while a person types. For attached files, the name, type and size, never the contents. |
| Whether a warning or a block was shown, and what the person did next |
What Openwake does not take.
- Keystrokes
- Screenshots
- Email, documents or files
- The contents of web pages
- Anything from personal devices, unless your organization installs Openwake on them
Three settings, owners only.
| Setting | What it decides |
|---|---|
| Enforcement | Observe, Warn or Block. Only a credential is ever blocked. |
| Browser sites | AI and known vendors (the default), or All sites, domain only. |
| Evidence | By default Openwake keeps labels, never content. An owner can choose to keep a short excerpt with the sensitive values removed when something breaks policy, or, for evaluation, the submissions themselves. Kept content is encrypted before it is stored, only people you name can reveal it, and every reveal is recorded with who and why. |
How long, and where.
- Activity is kept for 90 days on Free and 365 days on Team and Business. Events behind an open detection are kept until it is resolved, and for up to a year after.
- Kept content follows the retention you set in the Evidence settings.
- Openwake is hosted in Ashburn, Virginia, United States (Akamai). The companies that process data for us are listed on the subprocessors page.
- Nothing is sold, shared for advertising, or used to train AI models.
Your organization decides, and tells its people.
Your organization chooses where Openwake runs and how these settings are set, and it is responsible for telling its people. We provide an employee notice template to make that easy. The legal details are in the privacy policy and the data processing addendum. Security questions: security@openwake.ai.