Monitoring that can prove it's still on.
For court- and programme-mandated supervision, company-owned devices, and elder care. Consented monitoring with tamper detection, encrypted case records, a caseload each officer sees only their own part of, and a collection node you control.
Dedicated node · Consented monitoring only · Case records encrypted at rest
A silent device isn't a clean record
Most filters answer "what did this device visit?" — and quietly report nothing once the profile is deleted or a VPN goes on. For supervised monitoring, that gap is the whole problem: an empty report and a bypassed device look identical.
Tamper detection
A removed profile, a deleted agent, or a VPN — an app, or only a configuration in system settings — is named with a timestamp, not silently ignored.
Told when it happens
Alerts land in the dashboard and by email, so a bypass isn't discovered at the next review.
Exportable records
Activity and blocked-site reports, and the case records themselves, export to CSV for case files and audits.
Your own node
A dedicated collection node, isolated from other customers. Retention is your policy.
Built around a caseload
A supervising agency does not manage devices. It manages people, each with a case, an officer, and usually more than one device.
Case records
One record per supervised person, with their devices attached. Case, SID, FBI, PD and licence numbers, date of birth and SSN are encrypted at rest and found only by exact match.
Officers see their own caseload
A caseworker sees the cases assigned to them and no one else's — in the portal and on the node. Several officers can share a case, so cover does not mean handing it over.
Who needs attention today
The caseload flags each case with what was found: known-material matches, open device alerts, blocked attempts and bypass tools. Open the case, open the device, see the file.
Every view is logged
Who opened, searched, changed or exported a case record, and when. "We cannot say who read this" is not an answer an agency can give.
Import that never overwrites
Bring an existing caseload in from CSV. A row creates a case or fills blanks on a matching one; a value already on file always wins, and two people with one name are never merged.
Supervised history is kept
A device attached to a case with a case number is exempt from routine pruning, and it never comes off that exemption automatically.
On the device
With the agent installed — Android and Mac today — the record covers what is on the device and where it is, not only where it browsed.
Device location
From the device's own location services, typically to tens of metres, with its accuracy stated beside it. A reading that disagrees with the network location is itself a signal.
Files, photos and video
Hashed and scored on the device. Each alert lists the files behind it with their full paths. The file is never copied to us.
Attached storage
External drives, USB sticks, memory cards and network shares are scanned, and a drive is scanned within seconds of being plugged in.
Apps and VPNs
VPNs, vault apps, remote-control tools and stalkerware are named — including a VPN that exists only as a system profile, with no app to find.
Health & safety alerting
Wording about self-harm, threats to others or organised hate raises an alert. Reported as "no alert raised", never as "all clear": it reads wording in files, not the person.
Attended remote session
On a Mac, the person at the device can start a session and read you a code. Nothing is shared until they start it, and they can end it.
🩺 Health & safety alerting
A welfare signal is not a violation — and it is not reported as one
Supervision is not only compliance. The same scan that examines a device's files also watches for wording that means the person may be at risk, or that someone else may be — and reports it apart from everything else, because the right response is different and faster.
What raises an alert
Wording about suicide or self-harm, threats to harm others, and organised-hate material, in documents and file names. Each row says which kind it is.
What the officer sees
The file, its path, the category and the words that matched — on the device's page and flagged on the caseload, without waiting for a scheduled review.
How it is worded
"No alert raised" when nothing has matched, and "not checked yet" when nothing has been scanned. Never "all clear": it reads files, not the person.
Matched on wording alone, on the device, from term lists the device holds only as hashes. It does not read messages, emails or calls, and it cannot tell a quotation from an intention — a person has to read it and decide.
Where it fits
All of these are consented monitoring — the monitored person owns the obligation or the organisation owns the device.
Court & programme mandated
Supervision conditions and treatment programmes where compliance has to be demonstrable, not assumed.
Company-owned devices
Acceptable-use enforcement on equipment the organisation owns and the employee has been told about.
Elder care
Scam and phishing exposure on a device belonging to someone who asked for the help.
Small institutions
Clinics, shelters, and small programmes covering a shared network in one step.
What it does — and what it doesn't
Worth being precise, because supervised monitoring is exactly where overstated capability causes harm.
It does
Report the sites, categories and apps a device contacts; block categories you choose; name bypass tools and VPNs; and, with the agent, report the device's location and examine the files on it.
It doesn't
Read messages, emails or calls, or log keystrokes. A screen is seen only in a remote session the person at the device starts. Files are examined where they are; their content is not uploaded.
Two kinds of location, kept apart
Where the device says it is, from its own location services, and where its traffic reaches the internet, which is a city at best and which a VPN moves. They are reported separately and never blended into one pin.
Not covert
We don't support deployment against an adult who hasn't been informed. That isn't a limitation we're working around — it's the line.
Questions organisations ask
Is this the same product as the family plans?
Same platform, different packaging. The monitoring, blocking, tamper detection, and reporting are identical. Professional engagements add the auditing, retention, and administrative arrangements that supervised monitoring requires, so they are quoted separately rather than sold through consumer checkout.
Can it be used for court-ordered or programme-mandated monitoring?
Yes, where the monitoring is lawful and consented — a condition of supervision, employment, or a treatment programme that the monitored person has been informed of. It is not a covert surveillance tool, and we do not support deploying it as one.
How do you know the device is still being monitored?
That is the part most filters get wrong. If a device stops routing through MyPathKeeper — a removed profile, a deleted agent, a VPN (as an app or as a bare system configuration), or a browser doing its own encrypted DNS — it is flagged as a tamper alert with a timestamp, rather than silently reporting nothing. A quiet device is treated as a question, not as a clean record.
Can we get the records out?
Yes. Activity and blocked-site reports export to CSV, and so do the case records. Data lives on a collection node you control, so retention is your policy rather than ours. A case-record export is a plaintext file of identifiers — it is restricted to administrators and every download is logged.
How are case records protected?
They are held only in the portal, never on a collection node. Case, SID, FBI, PD and licence numbers, date of birth and SSN are encrypted at rest and searchable only by exact match through a keyed index. Staff access requires multi-factor sign-in, and every view, search, change and export is written to an access log on the record. The agency agreement (CJIS, where it applies) is part of onboarding.
Can more than one officer work a case?
Yes. A case can have several caseworkers — cover, a supervisor, a joint case — and each sees that case and its devices. An officer never sees a case they are not assigned to, and that boundary is enforced on the collection node as well as in the portal.
Do you monitor message content?
No. DNS protection sees which sites and services a device contacts. With the agent installed it also reports the device's location, names the apps on it, and examines the files it holds — on the device, reporting findings and paths rather than content. It does not read messages, emails or calls, and it is not a keylogger. We would rather be clear about that than imply more reach than we have.
Who runs the infrastructure?
A dedicated collection node, isolated from other customers. You control it; we do not resell the data or hand it to advertisers.
MyPathKeeper is intended for lawful, consented monitoring — for example a parent protecting a minor, an organisation monitoring devices it owns, or another person you are legally authorized to supervise. It is not for covert surveillance of another adult.
Protecting your own children? The family plans are self-serve and start with a 14-day free trial.
Tell us what you need to monitor
Professional engagements are scoped and quoted individually — tell us the situation and we'll tell you honestly whether we fit. We reply by email.