Oliver Kieselbach
fced858a7a
Rework the public Terms of Use and Privacy Policy from their early-days wording to match how the service actually runs today, and fix a setting that looked like a privacy control but gated nothing. Legal positioning: - glueckkanja AG operates the service and is the counterparty on BOTH plans (Community/Enterprise is a flag in one system, one subscription). Oliver Kieselbach is named as creator and maintainer of the open-source project and the Community edition, acting on behalf of glueckkanja AG and explicitly not a separate contracting party. - Community: free, "AS-IS", no availability or support commitment. Enterprise: written agreement incl. DPA, higher limits, MSP delegation. - Added business-use-only clause, simplified governing law (dropped the CISG exclusion - it governs sale of goods, not SaaS), split liability per plan, added an MSP delegation section and a rules-contribution clause covering the community rule pool. - Imprint links to the glueckkanja AG imprint, whose scope clause covers every service linking to it - no duplicated company data to go stale. Reachable from the landing footer and both help menus. Privacy Policy corrections (previous claims were inaccurate): - "No personal data is transmitted" - backend telemetry carries the UPN; only the browser SDK is cookie- and UPN-free. - "Not shared with third parties" - qualified for MSP delegation, customer-configured notification channels, the customer's own LLM via MCP, and agent-side geolocation. - Removed "data subject rights are not guaranteed"; GDPR rights are not optional. Added region, sub-processors, retention and IP handling. Agent - SendTraceEvents gate: The setting was plumbed from TenantConfiguration through to AgentConfiguration but never consumed; Trace severity only hides an event from the timeline view. The outbound IP was therefore always collected when geolocation is on (which is the default). Gate is now enforced in TelemetryEventEmitter.Emit, the single choke point before the transport enqueue. Dropped before the sequence counter advances so suppression leaves no gaps. Evaluated per event via Func<bool> so a mid-session remote-config merge takes effect. Fails open: an unwired or throwing accessor lets trace events flow, because the gate suppresses diagnostics and must not silently blind the timeline. Default stays on and the switch remains operator-only via the config table - deliberately not surfaced in the UI or documentation. Verified: solution builds clean, 1873 agent core tests pass, tsc --noEmit clean. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
AutopilotMonitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.
Private Preview
Autopilot Monitor is currently running as a Private Preview. Visit autopilotmonitor.com to request access and learn more.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full admin documentation is available at docs.autopilotmonitor.com
License
This project uses a split licensing model:
- MIT License — Agent (
src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices - AGPL-3.0 — Backend (
src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source
See LICENSE for full details.