What Avanoo collects

Avanoo is designed to provide useful SaaS visibility without collecting the contents of the activity it observes.

Metadata, not content

Depending on the capabilities enabled for your organization, the extension can collect metadata such as:

• application and domain activity;
• identity and organization context;
• timestamps and event status;
• download, upload, clipboard, and file metadata such as names, sizes, lengths, and MIME types;
• authentication and session metadata; and
• installed-extension inventory.

The extension does not collect AI prompt or response content, file contents, or plaintext passwords.

Capabilities are controlled

Data-activity and security features are controlled by organization-level settings. These features are disabled by default and do not run until enabled for your organization.

The information available in the platform therefore depends on:

• the modules enabled for your organization;
• the monitoring settings selected by an administrator; and
• the identity mode chosen for the deployment.

Identity affects visibility

Your identity mode determines what Avanoo can associate with an event:

• Identified mode uses the real user identity.
• Pseudonymous mode uses an organization-controlled alias.
• Anonymous mode uses a device signature and provides only coarse usage visibility.

Read the identity mode comparison before deployment and the privacy model for more detail.

For a feature-specific data inventory, contact your Avanoo administrator or representative.