Security and privacy

• Analysts sign in with Microsoft Entra. Your organisation's own sign-in policies apply.
• Administrators end a person's sign-in. People end their own.
• The audit log records what people do in livewells. Administrators export it.
• livewells records downloads of case files in the audit log.

• Cases are visible to the analysts of your organisation.
• Maelstrom AI staff open a case only to give support, or to investigate abuse or a security incident.
• Cases are stored apart from the cases of other organisations.
• Stored evidence is encrypted with a key that is unique to your organisation.
• Administrators choose how long livewells keeps cases, from 7 to 365 days. The default is 90 days.
• livewells deletes cases when the retention period ends.
• Administrators delete a case, or all of the organisation's data.
• A ZIP export of each case holds the video, the reports and a manifest.

• Each session runs in its own disposable browser. livewells destroys the browser when the session ends.
• A session lasts 15 minutes at most. It ends after 5 minutes without input.
• livewells refuses links and connections that point to private or internal addresses.
• livewells accepts HTTPS connections only. All indicators on screen and in exports are defanged text.

• livewells uses de-identified details of cases that your analysts confirm are malicious to improve detection.
• De-identified means livewells removes recipient identifiers from the details.
• This is on by default. Administrators exclude cases in the Data use section of Settings.

• Cloudflare hosts livewells, including the browser of each session.
• Microsoft Entra provides sign-in through your own Microsoft tenant.
• Enrichment data comes from providers of IP address data and threat intelligence.

Support is by email at support@livewells.io. We reply to support email by the next business day, 09:00 to 17:00 Australian Eastern Time.

Report a security issue to support@livewells.io.

livewells is made by Maelstrom AI Pty Ltd, Victoria, Australia.