- Account, profile, and onboarding state for clients and contractors.
- Role scopes, applications, candidate decisions, and audit trails.
- Tracked work-time, weekly timesheets, evidence references, approvals, and weekly reports.
- Wallet balances and ledger entries for earned-work amounts in transit through Anastasis.
- Notifications, support tickets, and dispute records.
Built to be reviewed, not just trusted.
Every scope, timesheet, screen capture, approval, and payout is logged and reviewable. Card and bank details never touch our servers. Below is exactly what we do, what we don't, and how we handle the edge cases.
What we store, where, and for how long.
No surprises about what lives on our servers. Sensitive payment and identity material stays with the regulated providers that own it.
- Raw card numbers, CVV, or full PAN. Card setup is hosted by our PCI-compliant payments provider; we keep brand, last4, and readiness status only.
- Contractor bank account numbers, CLABE, SWIFT, or IBAN. External withdrawals live with our payout provider; Anastasis only stores the connection state.
- Government-ID images outside the verification provider's enclave. Identity documents are uploaded directly to the provider's hosted flow.
- Personal device contents, file system access, or keystrokes. The desktop tracker captures application focus and periodic activity captures only.
- Application data: encrypted-at-rest in our managed database, accessed only through audited endpoints.
- Screen captures: short-lived signed-URL reads, 15-minute expiry, never embedded directly in the page.
- Card data: our payments provider (PCI DSS Level 1).
- Contractor bank/FX/cards: our payout provider (regulated money-movement provider).
- Active engagements: data retained for the life of the engagement plus seven years for tax and audit obligations.
- Closed engagements: profile, timesheets, and audit trails retained per contract; activity captures pruned after 90 days unless a dispute is open.
- Deletion requests: client and contractor data can be redacted on request, subject to legal retention requirements.
What the desktop tracker captures — and what it never does.
Built so contractors can sign on without giving up the rest of their machine, and so clients can verify work without a privacy panic from the operator's side.
- Active application name and rough category (browser, code editor, email, etc.).
- Periodic screen activity captures during a tracked session, attached to the timesheet for client review.
- Idle / break detection so non-work time isn't billed.
- Keystrokes or page contents.
- Microphone, webcam, or location.
- Anything when the tracker is paused or stopped.
- Personal browser windows or applications outside the tracked session.
Screen activity captures are evidence for the weekly timesheet review, not surveillance. They are visible to the named client approver during the review window and to Anastasis support if a dispute is opened, then archived per the retention policy above.
Money moves on a documented cadence, not on a vibe.
The weekly cycle is the same for every client and every operator. Approval cutoff Monday. Charge Tuesday. Payout target Friday for funded, approved hours.
Contractor submits
Auto-built timesheet from tracked work plus any explained adjustments. Status moves DRAFT → PENDING.
Client approves
Named approver reviews each row, evidence, and notes. Anything not declined or disputed by the deadline auto-approves.
Client charged
Our payments provider runs the weekly charge against the client's card on file. Anastasis sees the result, never the card number itself.
Contractor paid
Approved net (gross minus the 15% platform fee) is sent to the contractor's connected payout account. The payout provider owns downstream bank withdrawal, cards, and FX.
- Free for companies. No retainer, no placement fee, no platform subscription.
- 15% from contractor earnings. Disclosed before application, surfaced in every payout statement.
- No upcharge on tools. Time tracking, screenshot activity, admin portal, and weekly reports are included.
- If the Tuesday charge fails, the client receives an immediate failure notification and the role's publish gate re-locks until the card is updated.
- Contractor payouts already in transit settle normally; the next cycle is paused until billing recovers.
- No penalty fees on either side — the system pauses, it doesn't punish.
Documented record, not he-said-she-said.
Every scope, timesheet, approval, and report is audit-logged. If a dispute opens, it's adjudicated against the record. Most resolve in under 48 hours.
If a client declines a row or asks for adjustment, the contractor sees the reason and can revise. Anastasis support is included in any thread the client or contractor escalates. Funds in transit hold until resolution.
If an operator isn't a fit — ever, not just in the first 30 days — we rematch at no cost. No capped window, no placement fee, no "credit" games. The previous engagement closes cleanly with the documented record intact.
Role-scoped access, end-to-end.
No "admin sees everything" buckets. Each role on the platform sees only what its job requires.
The candidates applying to your roles, their packets, your own engagements, your timesheets and approvals queue, your billing status. No view into other clients' data, no view into a contractor's other engagements.
Your own profile, applications, engagements, timesheets, evidence, payouts, and notifications. No view into other contractors' applications or rates, no view into a client's other operators.
The minimum needed to run vetting, dispute adjudication, and payout reconciliation. Every admin action is audit-logged and surfaced in the affected user's activity history.
Ask. We'll add it here.
If a security, data-handling, or process question matters to your decision and isn't covered above, send it over — we'll either answer in the next call or document it on this page.