Elastic
Warming up your workspace — safe, calm, and almost ready.
Preparing your space
Telemetry should prove adoption without exposing people.
Warming up your workspace — safe, calm, and almost ready.
Preparing your space
Telemetry should prove adoption without exposing people.
Trust & Security
PortalKinetic is the Relief Operating System for overloaded professionals: clear your head, see what matters, and take one next step. It is not professional care, does not label people, and is not employee monitoring. The product does not ask users to manage another system. It reduces what they have to hold.
Core law: show one useful next action. Hide everything else until needed. The system exists to protect capacity, not extract output. This page documents the boundaries we hold in code.
Each pledge below is enforced by code we ship, not by a marketing promise alone.
The employer-visible reporting plane does not receive keystroke timing, typing cadence, focus-switch signals, mouse dynamics, gaze tracking, screen monitoring, raw activity trails, private content, individual scores, or per-user output exhaust. Those signals are not returned in buyer-facing telemetry, not available to managers, and not exported to HRIS, compensation, promotion, discipline, termination, or performance-management workflows.
Admin dashboards surface aggregate, cohort-safe team metrics only. Minimum group size is enforced server-side; cohorts below the threshold are suppressed. Individual reset history, journal entries, and capture-list contents are never exposed to employers or admins.
Guided Reset does not currently contribute ratings to aggregate starter patterns. Administrators and organizations cannot enable it, and private notes and reset history are never exposed to employers.
PortalKinetic is supportive and makes no professional-care claims. Shared admin insight payloads use redaction helpers such as OrganizationPrivacyService.scrubInsightMetrics to drop sensitive status fields (for example: condition_inference, mental_health_risk, support_notes, and private_state_flags) before they reach organization-facing views.
Journal entries are AES-256 encrypted at rest plus server-side application-layer encrypted with ENCRYPTION_SECRET_JOURNAL. Ciphertext is never transmitted to any AI provider. Decryption happens in-memory on our server only on explicit user request; plaintext is discarded after the call.
Configured tenant AI credit wallets enforce prepaid monthly caps when the wallet is provisioned and reachable. Provider calls are refused at the configured cap; there is no automatic overage. A dry-run mode replays the last 30 days of actual spend against a proposed cap so you can validate the budget before turning AI on. See your admin area → AI credits.
KILL_SWITCH_AI_ROUTER=true is the emergency control for severing AI provider traffic. No user content reaches any model while active. Rehearsal cadence and evidence are documented for enterprise review.
Operating laws
These are the promises enterprise buyers should expect to see in the product, in the pilot, and in the admin boundary.
PortalKinetic is built to lower mental load in the moment, not to make people organize more before they can begin again.
We avoid streak pressure, profile-completion theater, and manager-facing nudges that create more overhead than relief.
Mental Unload, private notes, reset history, and personal context belong to the employee plane, not to a manager view.
Enterprise value comes from aggregate, cohort-safe adoption and outcome patterns, not from individual scoring, ranking, or surveillance.
Review examples
The telemetry contract is deliberately small. It proves aggregate adoption without exposing the person behind the action.
Can an admin ask: What did Sarah write today?
Not available. The employer-visible reporting plane does not contain names, private text, task titles, or journal content.
Can an admin ask: Who is struggling?
Not available. Small cohorts are suppressed and individual pressure or reset history is not returned.
Can an admin ask: Is the support layer being adopted?
Available in aggregate only: event type, count, unique-user count, day-level trend, and suppression metadata.
Can an admin ask: Can HR receive a risk export?
No. Individual signals are not exported into HRIS, compensation, promotion, discipline, termination, or performance scoring.
Proof path
PortalKinetic is an ecosystem of relief, reporting, security, and rollout assets. This path keeps procurement focused on the trust boundary instead of hunting through scattered collateral.
1. Start with this one-pager
Use Trust & Security for the procurement-safe boundary, review examples, and security facts.
2. Show what admins cannot see
The buyer-share refusal surface — an explicit list of fields employers never receive. Show it to the team before the product.
3. Answer objections from FAQ
Use the FAQ for surveillance, payload, admin-plane exclusion, and pilot measurement answers.
4. Open the procurement proof packet
Ask for the telemetry contract, excluded-fields matrix, suppression rule, payload, and tests.
The trust story is stronger when the boundary is explicit. The system exists to protect capacity, not extract output.
We are clear about the boundary on every sales call. Stating it here saves both sides a procurement cycle.
Includes SCCs, subprocessor list, and audit cooperation terms.
Current list, tiers, notice terms, and DPA links provided for review.
Provided to enterprise prospects under mutual NDA.
Pre-completed answers; we typically respond within two business days.
Direct contact: security@portalkinetic.com. For data-subject requests, see /data-rights.
Explore our anti-surveillance guarantee, procurement JSON packet, and customer data plane specs.
Interactive verification showing why individual notes and states are forever private.
Exportable compliance JSON, data residency details, and security questionnaire answers.
Full data sovereignty: own your database, region, connection keys, and audit exports.
Clear public declaration of what PortalKinetic does and what it never claims to do.
Ready to evaluate? Start a 6-week clarity pilot →