Pilot preview. Entries marked Sample are illustrative and haven’t been technically reviewed or signed off yet.
Question

What can my employer or IT provider see in Haven?

Short answer

Security reporting: which Protected sites you visited, link checks and phishing warnings, when Haven paused your extensions, and your installed extensions. Not your general browsing history, page contents, keystrokes, passwords or form data.

What an admin sees

A Haven organization's owners and admins can see security reporting about members: which protected sites they visited, link checks and phishing warnings with their verdicts, when Haven paused their extensions on Protected sites, paused downloads, how many Haven installs they run, and their installed extensions with a risk assessment. They can't see members' general browsing history, page contents, keystrokes, passwords or form data.

Reports don't overstate protection

In Monitor-only, Haven pauses no extensions, so reports show no extension pauses rather than protection that did not happen.

Whose data it is

When Haven is provided by your employer or IT provider, that organization directs how your data is used and Haven acts as its service provider. Privacy requests go to that organization, and Haven helps it respond.

For the organization

Haven offers a Data Processing Addendum for Haven Business organizations, covering service-provider terms and Haven's list of sub-processors.

If you're the admin expecting pushback

Technical staff often assume a security extension means monitoring. The most useful thing to share is the list of what admins can't see, in the first section.

How Haven handles this

  • A Haven organization's owners and admins can see security reporting about members: which protected sites they visited, link checks and phishing warnings with their verdicts, when Haven paused their extensions on Protected sites, paused downloads, how many Haven installs they run, and their installed extensions with a risk assessment. They can't see members' general browsing history, page contents, keystrokes, passwords or form data. The install count is a number only; admins see no identifier for any one install. The reporting is coarse telemetry, such as a site name, a category and a verdict.Verified by engineering October 29, 2026
  • In Monitor-only, Haven pauses no extensions, so reports show no extension pauses rather than protection that did not happen.Verified by engineering October 29, 2026
  • When Haven is provided by your employer or IT provider, that organization directs how your data is used and Haven acts as its service provider. Privacy requests go to that organization, and Haven helps it respond.Verified by engineering October 28, 2026
  • Haven offers a Data Processing Addendum for Haven Business organizations, covering service-provider terms and Haven's list of sub-processors. Ask Haven for it.Verified by engineering October 28, 2026
Signed off by Tina Feng (November 3, 2026, via Slack). Last reviewed November 3, 2026. Spotted something wrong? Tell us.
What can my employer or IT provider see in Haven? | Haven Field Guide