Security

Security and privacy, in plain words

Strong tools come with responsibility. This is what Tendi does to protect you and the people you look after.

Every account is separate

People in one account cannot see or reach the computers, rules or history of another account.

Protected connections

Everything between your browser, your computers and Tendi travels over encrypted connections. Passwords are stored only as hashes, never as plain text.

Roles and permissions

Each co-manager gets only the permissions of their role (admin, IT, manager or auditor). Sensitive changes can require someone else to approve them first.

A PIN on each computer

A PIN can protect the settings and the exit of Tendi on each computer. PINs are checked on our servers, with a lockout after repeated wrong tries.

A history that shows tampering

Important actions are written to an activity history that is chained and signed. If an entry is changed or removed, it shows up.

Private screens (optional)

Turn on end-to-end encryption for live view and screenshots. With it on, Tendi cannot open them — only you can, with your passphrase.

Signed updates

Tendi updates itself, but installs an update only after checking its digital signature. If an update does not work, Tendi goes back to the version that did.

Open with the people being looked after

Tendi shows notices on the computer for important actions, such as when the screen is watched live or a USB device is plugged in. This is care, never spying — and you must tell the people concerned.

Coming soon: remote control and file retrieval

These Business plan features are not available yet. They are being built so that nothing can start without the person at the computer.

  • The person at the computer must click Agree for each session.
  • A banner stays on the screen the whole time, with a button to end it at once. Each session also ends by itself after 30 minutes.
  • Every session is written to the activity history. For retrieved files, only the path and size are recorded — never the content.
  • Places that hold secrets — saved passwords, keys and system files — are blocked, and a retrieved file is deleted after 24 hours.

What we do not claim

Tendi has not been independently audited or certified, and no software is perfectly secure. Do not use Tendi to watch people in secret — see Acceptable use. If you find a security problem, please tell us.