What Proxon captures
The three capture levels, what each one includes, and how an admin turns capture up or down.
Proxon measures how AI tools are used across your organization by observing activity on the surfaces you connect. This page explains what that observation can include, so you and your security team can decide how much to turn on.
Proxon collects data at one of three levels, and an admin chooses a single level that applies to every observer. Each level includes everything in the level below it, so more detail builds on less. Behavioral data is the default. The most detailed level, Content aware, stays off until an admin turns it on.
Metadata only
Which AI tools each person uses, and when and how often. Proxon captures no content of any kind at this level, so nothing that was typed, named, or copied. It records the site someone visited, but never the specific page.
Behavioral data
Everything in Metadata only, plus the shape of each interaction. That includes how big a prompt, file, or paste was, which tools ran and for how long, and which provider it went to. It still captures none of the words themselves.
Content aware
Everything in Behavioral data, plus the text itself. That includes prompts, replies, the model's reasoning, document and tab titles, full page addresses, and what tools were given and returned. A tool result can be an entire file. Document and tab titles and full page addresses sit at this level because they can reveal the substance of the work, such as a customer or file name, not just the fact that AI was used.
Turning on Content aware is a single, deliberate choice, and it stays off until an admin makes it. The one setting applies to all three observers at once. Admins set it in Data Collection under org settings and can change it at any time.
What each observer adds at the Content aware level
The client-side observers watch different places, so each one contributes something different at the Content aware level.
| Observer | What the Content aware level adds |
|---|---|
| Browser | The full page address and tab title, and the prompt text on supported AI chat sites |
| Desktop | The title of the foreground window, which can include a document name |
| Network | The prompts, the replies, the model's reasoning, and what tools were given and returned, for supported apps |
The other sources, meaning AI vendor integrations, the Capture Proxy, the Proxon SDK for Agents, and OpenTelemetry, capture whatever the connected account or instrumented system exposes. Each one's own page documents the specifics.
What Proxon does not capture
- Proxon never records your keystrokes, the contents of what you copy or paste, or the individual commands you run, at any level. At the Behavioral data level it can measure how large a paste was, but never the text inside it.
- At the Metadata only and Behavioral data levels, Proxon captures none of the words. That means no prompts, no responses, no titles, and no page addresses.
- On the network, Proxon inspects only known AI services, not your general traffic. Other traffic, such as regular browsing and email, passes by untouched, and apps that encrypt their traffic end to end cannot be inspected.
- Anything you have not turned on is not captured. When Content aware is off, none of the content described above is collected.