F7 Trust CenterSecurity, privacy, and compliance

Everything you need to know about how F7 protects your organization's data.

Device Agent Shelved

The F7 device agent, controller and dashboards described on this site are shelved and not offered. The pages describe how they were designed and how they worked.

🔒

Security by Design

Built in Rust — a memory-safe language. Six layers of defense from device to database. Modern cryptography throughout.

🛡️

Privacy First

The F7 agent captures work-pattern metadata — never content. No prompts, no files, no emails uploaded; no screenshots ever leave the device.

📋

Compliance Ready

Controls aligned with GDPR, CCPA, SOC 2 Type II, and ISO 27001. Built for enterprise procurement.

👤

Employee Controls

Organizations can pause observation, exclude apps, and set work hours. A personal dashboard for employees to access their own data is planned.

🏠

Local-First Processing

An on-device AI model classifies behavior locally. Only structured, PII-scrubbed metadata is transmitted to the server.

📝

Full Transparency

We publish what we collect, what we never collect, and how every piece of data is used. No surprises.