Privacy & security

How we protect your data

In place today - HTTPS everywhere (TLS 1.2 or newer). The desktop agent only talks to the TeamLens API over HTTPS. - Passwords stored only as bcrypt hashes. - Optional two-factor sign-in, plus Google sign-in. - Role-based access: employees see their own data, managers their teams, admins set policy. - Hosted on a dedicated server in Finland (EU). Databases are not reachable from the internet. - Nightly database backups. - Sign-ins, admin actions and notice acknowledgements are logged. - Card payments are handled by our payment provider. Card numbers never touch TeamLens servers. Not there yet: full encryption at rest, single sign-on (SSO), an independent penetration test, and SOC 2 / ISO 27001 certification. We'll update this page when that changes. Found a vulnerability? Email info@teamlens.ai.

Turn on two-factor sign-in

1. Open Settings in the TeamLens app. 2. Choose Enable two-factor authentication. 3. Scan the code with an authenticator app (such as Google Authenticator or 1Password) and enter the 6-digit code. 4. Save your backup codes somewhere safe. You can Regenerate codes later. You can also sign in with Google.

Data retention and deleting data

- Screenshots and recordings are deleted automatically after 30 days by default. Your organisation can change this. - Other data is kept until your organisation deletes it. My data shows how long each kind of data is kept. - Employees can ask to have their data corrected or removed; see Correcting or removing your data in My data. - Workspace owners can export their data at any time, and can ask us to delete the whole workspace. For privacy requests, start a chat from teamlens.ai or in the app.