The workplace, point by point.
Twelve tracking points in a modern workplace, from the badge reader to the payroll data broker, with the named systems behind each and the practical response.
Work observes. The badge logs the day and the laptop reports to its owner, while payroll history sells through a credit bureau. This dossier walks every point on the Atlas office map in depth, with the practical line between what is the company’s and what is still yours.
Room sensors.
Occupancy sensors and calendar systems log who uses which rooms and when. Space analytics is attendance tracking with a friendlier name. Occupancy sensors and badge data merge with calendars into space analytics: who used which rooms, and with whom. Vendors sell the utilization dashboards. The dataset that right-sizes real estate also reconstructs your workday. Retention usually runs as long as the lease.
Known systems / VERGESENSE
Space analytics is a euphemism for knowing where every employee is.
Office cameras.
Workplace cameras cover entries and floors, increasingly desks, with footage retained on company terms. Workplace cameras cover entries and floors, increasingly desks, with retention and access set by policy. Analytics increasingly ride on top of the footage. Monitoring disclosure requirements vary by state. The camera near your desk answers to HR and legal, and it never answers to you.
Known systems / VERKADA
The workplace watches with better cameras and fewer rules than the street.
Company vehicles.
Fleet cars and vans carry GPS trackers reporting location and speed to the employer all shift, every stop included. Fleet telematics reports position, speed, harsh events, and idle time continuously, with dashcams facing both ways on many fleets. Driver scores follow. Samsara and Geotab run the dominant platforms. The company car commutes with a chaperone.
Known systems / SAMSARA · GEOTAB
A company car means your employer rides along on every trip.
Badge reader.
Every door tap is a timestamped location record. Badge logs reconstruct your day in the building, and they are routinely pulled in disputes. Every tap writes employee and door to the access system, timestamped, building a building-level movement log. Direction-aware systems track entries and exits both. Badge logs are pulled routinely in investigations and disputes. Your day in the building is already a spreadsheet.
Known systems / HID · LENEL
Your movements through the building are a searchable dataset with your name on it.
Visitor sign-in.
Guest systems photograph visitors and scan IDs, then keep the log. One meeting enters you into a database you will never see. Guest kiosks capture name, photo, ID scans, host, and time, retained in the vendor cloud. Watchlist screening runs silently at some sites. One meeting enrolls you in a database with its own breach surface. Where a signature suffices, decline the ID scan.
Known systems / ENVOY
One visit enrolls you in a stranger’s database, photo included.
Work laptop.
Company management software on the device can see apps, files, browsing, and location. Assume the machine reports to its owner, because it does. Management software inventories apps and files and enforces policy, and depending on configuration it can view screens or location. Endpoint security watches process-level activity. Assume the machine reports to its owner, because it does. Personal accounts on a work device donate your private life to the corporate log.
Known systems / JAMF · TERAMIND
On a managed device there is no such thing as a private moment.
Email + chat logs.
Work email and chat are retained and searchable, and legally the company’s. Deleted messages persist in archives long after the conversation. Work email and chat sit under legal-hold and compliance tools that make deletion recoverable and everything searchable. The archive belongs to the company. Purview and Vault exist to search employee communications. Write at work as if discovery is the audience, because eventually it can be.
Known systems / MICROSOFT PURVIEW · GOOGLE VAULT
Work messages are corporate records first and conversations second.
Office network.
The corporate network and VPN log every connection from every device. Working from the office means browsing on the record. Corporate networks and VPNs log connections per device and user, and TLS inspection can read encrypted traffic on managed machines. DNS logs alone map browsing. Split tunneling and personal hotspots blur the line in both directions. Browsing on the office network is browsing on the record.
Known systems / ZSCALER
Office browsing is browsing on the record, by design.
The printer.
Office printers keep audit trails of every job by user, and many embed hidden tracking dots on the page itself. Print servers log every job by user and title, timestamped, and secure-release adds badge taps. Many color lasers add tracking dots on the page itself. Print logs surface first in leak investigations, and watermarking can tie pages to sessions. The office printer is an evidence machine.
Known systems / PAPERCUT
Even the paper you print at work is logged and, often, secretly marked.
Activity monitoring.
Productivity tools measure keystrokes and active hours, screenshots included. The dashboard version of you is being scored somewhere. Productivity tools capture active hours, app usage, keystroke counts, and periodic screenshots, scoring output. Deployment often arrives quietly alongside remote work. ActivTrak and Hubstaff anchor the market. Some states require disclosure of monitoring; the dashboard exists either way.
Known systems / ACTIVTRAK · HUBSTAFF
Being measured all day changes what work is, and the score is kept elsewhere.
Payroll data.
Employers feed salary and employment records to verification brokers, which resell them to lenders, landlords, and debt collectors. Your paycheck history is a product. Employers feed salary and employment history to The Work Number, Equifax’s verification service, which sells reports to lenders, landlords, and debt collectors. Coverage spans a large share of US payrolls. You can pull your own file and place a freeze, the same as credit. Most people learn the database exists when a decision cites it.
Known systems / THE WORK NUMBER (EQUIFAX)
Your salary history is a commercial product, sold by a credit bureau, without a signature from you.
Wellness program.
Step challenges and health screenings route personal health data through third-party vendors under looser rules than your doctor. Step challenges, screenings, and health apps route wellness data through third-party vendors under contract, often outside medical privacy law’s reach. Incentives price participation. In many program structures the data flows under consumer terms, not medical ones. Read the vendor’s policy before the smartwatch syncs your sleep to work.
Known systems / VIRGIN PULSE
Step challenges route your health data around the protections your doctor is bound by.
The dossier covers what these systems do. When the person on the other end of one of them is a stalker or a stranger with intent, a threat that persists, that is Darkveil’s work.
Talk to Darkveil