Skip to content
Halo by OmniTrust

Legal

Endpoint Privacy Notice

Last updated: August 12, 2026 · Effective: August 12, 2026

This Notice describes the data collected by Halo Endpoint, our device agent. It supplements our Privacy Policy, which continues to govern everything it describes. Where the two documents overlap, this Notice provides the product-specific detail.

This device agent is deployed by an organization. Halo Endpoint is enrolled into an organization’s Halo tenant so that its security and IT team can inventory and govern AI use on enrolled devices. It appears as a device endpoint in the Edge section of the Halo dashboard. The data described below is Customer Data that OmniTrust Security LLC (“OmniTrust”) processes as a processor on that organization’s behalf and makes available to that organization’s administrators. That organization, not OmniTrust, decides what policy is applied.

1. Data collected by Halo Endpoint

Halo Endpoint inventories and governs AI use on enrolled devices. It collects the following categories.

  • Device and application inventory. Information about installed applications, browser extensions, startup items, IDE plugins, runtime artifacts, configuration artifacts, and AI provider endpoints discovered on the device.
  • Endpoint identity and health. Host, operating-system, agent-version, installation, collector-status, and error information used to monitor enrolled devices.
  • AI inventory and security telemetry. Inventory findings, policy decisions, detections, usage summaries, and related metadata generated while the endpoint is enrolled.
  • Process and application-control information. Metadata about running applications and processes, such as executable identity and process relationships, together with application-control status and policy-enforcement events.

2. Employer-deployed collection

The deploying organization is responsible for configuring Halo Endpoint, notifying its personnel, and meeting any notice, consent, or works-council obligations that apply where they work. We process this data on that organization’s instructions and cannot alter or delete it on an individual’s request.

If you want to know what is collected about you, or wish to access, correct, or delete it, please contact your employer or the administrator who deployed Halo. If you contact us directly, we will refer you to them.

3. Retention and deletion

Data queued for transmission is stored on the device only until it is sent successfully, or until a newer observation of the same item replaces it. Once received by Halo, endpoint data is retained while the account is active and for up to 90 days after account closure for export, unless a different period is required by law or agreed in an applicable Data Processing Addendum, as described in the Data retention section of our Privacy Policy.

Removing Halo Endpoint stops collection. It does not delete data already received by the deploying organization’s Halo tenant; that data follows the server-side retention period described above.

4. Changes and contact

If what Halo Endpoint collects or how it is used changes, we will update this Notice and, where the change is material, give notice as described in our Privacy Policy.

Privacy questions and requests: legal@omnitrusthalo.com. If Halo was deployed by your employer, please contact that organization first.