https://sonomos.ai/assets/Members-Dipf_igo.js

1import{j as e}from"./app-C5yrFt3l.js";import{C as i,A as l,T as n,H as a,a as r,b as d,X as t,U as o}from"./prose-BHwwadCR.js";import{M as s,D as h,d as c,R as u}from"./app-parts-DkNig8jc.js";function x(){return e.jsxs(e.Fragment,{children:[e.jsx(i,{eyebrow:"Plans, teams & roles",title:"For team members",lead:e.jsx(e.Fragment,{children:"Your organization set up Locke for you. Here's exactly what they decided, what's still yours, and — the question everyone actually has — what they can and can't see."})}),e.jsx(l,{plans:["member"]}),e.jsx("h2",{id:"what-they-see",children:"What your admin can see"}),e.jsx("p",{children:"Start here — everything else in this chapter builds on the answer."}),e.jsx(n,{caption:"What an admin can and cannot see about a member",head:["","Visible to your admin"],rows:[["How many sensitive items were detected on your device",e.jsx(a,{value:!0})],["How many were masked",e.jsx(a,{value:!0})],["Whether your device meets the org policy",e.jsx(a,{value:!0})],["That your protection was paused, and for how long",e.jsx(a,{value:!0})],["The messages you sent to an AI tool",e.jsx(a,{value:!1})],["The actual values that were masked",e.jsx(a,{value:!1})],["Which specific prompts triggered a detection",e.jsx(a,{value:!1})],["Which AI tools you personally used, per message",e.jsx(a,{value:!1})]]}),e.jsx(r,{kind:"privacy",title:"Why the second half is 'no' and stays 'no'",children:e.jsxs("p",{children:["Your detection log stores ",e.jsx("strong",{children:"metadata, not the text"})," — the type of value found, a count, a timestamp, how long the match was, and a one-way token. The record can show that a US Social Security number was protected at 09:41 without containing the number, and without containing the sentence it was in. Team reporting is built on those records, so there is nothing for an admin to read even if they wanted to. That is how the product stores data, not a setting anyone can flip."]})}),e.jsx(d,{topic:"How that boundary is enforced, and how you can check it yourself"}),e.jsx("h2",{id:"what-changes",children:"What your admin decides"}),e.jsxs("p",{children:["Your admin sets a ",e.jsx("strong",{children:"floor"})," — a minimum every device on the team has to meet. Three things:"]}),e.jsx(n,{caption:"What org policy controls",head:["Policy","Means for you"],rows:[["Required surfaces","Certain AI sites and apps are always protected. You can add more; you can't switch a required one off."],["Required data types","Certain categories are always detected. You can enable extra ones; you can't disable a required one."],["Scanning floor","A minimum sensitivity. You can choose stricter; you can't choose looser."]]}),e.jsxs("p",{children:["So the rule in one line: ",e.jsx("strong",{children:"you can always protect more, never less"})," — see ",e.jsx(t,{to:"/support/locke/plans/",children:"the rule that explains Teams"})," for why that's guaranteed rather than just promised."]}),e.jsx("h2",{id:"whats-yours",children:"What's still yours"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Everything above the floor."})," Extra surfaces, extra data types, a stricter sensitivity level, your own custom rules."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Your numbers."})," Your Dashboard, your counters, your live feed, your 90 days of history."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Your own reports."})," You can generate and export compliance and technical reports for your own device whenever you like."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"The Sandbox."})," Yours, entirely local, and never reported on."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Your app preferences."})," Theme, notifications, where the corner dot sits."]})]}),e.jsx("h2",{id:"what-you-see",children:"What looks different in your app"}),e.jsx("p",{children:"Three differences you'll notice right away, and a few smaller tells."}),e.jsx(s,{label:"The Dashboard as a Teams Member: a green banner reads that protection is managed by the organization and that the HIPAA-baseline policy was pushed by an admin and cannot be modified, above the normal status card, counters and feed.",caption:"1. A banner on the Dashboard naming the policy in force.",children:e.jsx(h,{role:"member"})}),e.jsx(s,{label:"The Controls page as a Teams Member: a banner clarifies that these are your own protection settings and that team-wide rules live under My Team, Policies.",caption:"2. A note on Controls, drawing the line between your settings and the team's.",children:e.jsx(c,{role:"member",discovered:!1})}),e.jsx(s,{label:"The Reports page as a Teams Member: a green banner confirms you can view and export your own reports and that team-wide reports are managed by your admin.",caption:"3. A note on Reports: your own reports are yours to export.",children:e.jsx(u,{role:"member"})}),e.jsxs("p",{children:["And a few smaller tells: your organization named in the sidebar, and"," ",e.jsx(o,{children:"Teams Member"}

1)," where an Individual user sees"," ",e.jsx(o,{children:"Individual plan"}),". You won't see ",e.jsx(o,{children:"My Team"})," — that page is admin-only."]}),e.jsx("h2",{id:"locked",children:"When a control won't budge"}),e.jsx("p",{children:"A control your admin has locked stays visible and disabled, and tells you who locked it. That's deliberate: a control that vanished would look like a bug, and you'd have no idea who to ask."}),e.jsxs("p",{children:["If a locked setting is genuinely blocking your work — a masked value breaking a task you need to do — your admin is the person who can change it, and"," ",e.jsx("em",{children:"that's the whole point of it being locked"}),". Locke support can't override org policy. Some builds offer a"," ",e.jsx(o,{children:"Request exception"})," button on locked controls that routes the ask to your admin directly."]}),e.jsx("h2",{id:"pausing",children:"Pausing, when you're on a team"}),e.jsxs("p",{children:["You can still pause — 15 minutes, an hour, or until tomorrow — and it still resumes by itself. The difference is that"," ",e.jsx("strong",{children:"pause events are recorded in the org audit log"}),", as the pause menu itself says. Your admin can see that a device was paused and for how long. They cannot see what you sent while it was paused, because Locke wasn't looking either."]}),e.jsx("p",{children:"Some organizations disable pausing altogether. If yours has, the button is disabled with a note naming your admin."}),e.jsx("h2",{id:"leaving",children:"If you leave the team"}),e.jsxs("p",{children:["When your seat is removed, the app explains what happened on next launch and moves you to ",e.jsx("strong",{children:"Individual"}),". The org policy is dropped, your full personal feature set is retained, and your local history stays where it was. Individual is free and complete, so nothing about your protection gets worse — you simply go back to setting your own rules."]}),e.jsx(r,{kind:"note",title:"If your device is offline for a while",children:e.jsx("p",{children:"Your last-known org policy keeps applying while you're offline. If Locke can't confirm your membership for an extended stretch, it falls back to Individual with a clear explanation rather than silently changing your protection. Either way, detection never stops — it has never needed a network."})}),e.jsx("h2",{id:"questions",children:"Who to ask"}),e.jsx(n,{caption:"Where to take a question as a team member",head:["Question","Ask"],rows:[["Why can't I turn this off?","Your admin. It's their policy, and only they can change it."],["Something sensitive wasn't masked.",e.jsxs(e.Fragment,{children:["Check it in the ",e.jsx(t,{to:"/support/locke/sandbox/",children:"Sandbox"})," first, then"," ",e.jsx(t,{to:"/support/locke/support/",children:"Support"})," — that's a product question, not a policy one."]})],["Can my manager read my prompts?","No. See the top of this chapter."],["I need a report for my own records.",e.jsxs(e.Fragment,{children:["Generate it yourself — ",e.jsx(t,{to:"/support/locke/reports/",children:"Reports"}),"."]})],["The app won't start.",e.jsxs(e.Fragment,{children:[e.jsx(t,{to:"/support/locke/troubleshooting/",children:"Troubleshooting"}),", then Support."]})]]})]})}export{x as Members};