What EAISight records.
EAISight is installed by your employer, usually through its IT provider, to record the use of AI tools on work devices. Your employer decides to use it and is responsible for it; this page describes exactly what can and cannot be recorded.
Always recorded (metadata)
- Which AI tool from a fixed catalogue was used (for example ChatGPT, Claude, Copilot), and whether in a browser, desktop app, command line or IDE.
- The Windows user and device, when the session started and ended, active time, and the number of prompts sent where this is observable.
- Whether the tool was used signed in, anonymously, with an API key or as a local model; the plan (free, Plus, Enterprise and so on) and the email domain of the account, so company and personal accounts can be told apart.
- Model names and token counts where the tool's own local logs record them.
- That Google or Bing showed an AI-generated answer, not what was searched for.
Recorded only if your employer turns it on
- Prompt capture (off by default): the text you type into AI tools in your web browser, and the search terms of Google or Bing searches that showed an AI-generated answer. Passwords, keys, card and bank numbers, National Insurance numbers, email addresses and phone numbers are removed on your device first. The text is encrypted, can be read only by administrators, every view is logged, and it is deleted automatically after your employer's retention period. AI responses are never recorded.
- Account identification (off by default): the email address of the AI account, rather than only its domain.
- Warnings and blocking (off by default): in Chrome and Edge, a page from your employer instead of an AI tool it has not approved, or not with the account you are signed in with. If you continue past a warning, the reason you choose is recorded; if you ask for access, your request and any note you add are sent to your employer's administrators and its IT provider.
Your employer's own staff notice should tell you whether either is on. If you are not sure, ask your IT team.
Never recorded
- Websites or applications that are not AI tools in the catalogue.
- AI responses, files, attachments or screenshots.
- Keystrokes outside AI tools, passwords, cookie values or sign-in tokens. Account detection keeps only derived facts (state, plan, domain) and discards everything else immediately.
Who can see it
Your employer's console users and its IT provider can view the data for your organisation only; group managers see only the people in their groups. EAISight staff can access it where needed to operate and support the service. Questions about how your organisation uses it, or requests to see or delete your data, should go to your IT team or line manager. See also our privacy policy.