Security

You decide what the assistant can do

An assistant reaches a computer only after you sign in, the device is paired, and the approval grant is still active.

The checks

What happens before an action runs

  1. 1 Your assistant
  2. 2 Sign-in with your account
  3. 3 Your workspace
  4. 4 Permissions and rules
  5. 5 Your approval
  6. 6 Final check on the device
  7. 7 Device execution

Sign-in

You sign the assistant in to Infser. That login is the only credential the assistant holds. It is not your computer password.

Separate workspaces

Devices and grants belong to the active workspace. Another account cannot see them.

Device state

A device can be pending, active, disabled or revoked. Disabled and revoked devices stop accepting work.

Time-limited grant

The grant lists the actions it covers on that device. It lasts for a limited time. Revoke it and those actions stop. It is not a permanent bypass.

Final check on the device

Before the action runs, Infser checks the grant again. An expired or revoked grant is not reused.

Revocation and audit log

You can revoke the grant, sign the assistant out, disable the device, or revoke its identity. Security events stay in the audit log. Screen pictures do not.

Content stays out of the logs

Infser keeps authorization metadata separate from file contents and desktop frames. Frames are not written to disk or to the audit log.

Control first

Connect the assistant you already use, and keep a way to stop it.