On the Windows device
Watchman keeps local history of reported endpoint conditions, posture, alerts and operational activity. It continues to operate locally if Citadel is unavailable.
Security & privacy
Visibility with clear boundaries.
Watchman operates locally on the endpoint. A connected deployment sends selected operational reports to Citadel. Vision support remains visible and requires a user choice for each session.
The data path
Local operation and connected coordination.
When connected
Enrolled nodes send heartbeats and selected snapshot, posture, alert, evidence and maintenance reports through the versioned agent API. Citadel stores reporting under the linked organisation.
Who can review it
Citadel is organised by tenant and uses role and permission checks for team views and administrative actions. Operators work within their authorised organisation context.
Attended support
The user remains in control of Vision.
A support request is visible to the user. They may approve View Only, approve Full Control or reject it. Attended support requires the user to be present; a session is not silent or unattended. The session can be stopped and its outcome is logged.
Questions for a deployment review
Details that belong in your technical agreement.
Transport
Connected reporting uses authenticated HTTPS requests. Confirm network destinations and certificate requirements during setup.
Hosting location
We will provide the connected hosting location and any applicable processing arrangements for your deployment before enrolment.
Retention & deletion
Citadel has plan-linked retention controls and explicit privacy redaction workflows. Confirm the applicable retention period and deletion process in your subscription terms.
Updates & storage protection
Release-delivery and storage-protection details are supplied for the version being installed during the deployment review.
Incident or privacy request
Contact info@amaxdigital.co.za for support or to report a security or privacy concern.
Information collected
Operational reports may include device identity, current user context, software inventory and action output. Scope and sensitive-field handling should be agreed with your organisation.