Desktop Node and Remote Access Addendum

1. Scope

This Addendum applies whenever the RentAgents Desktop Node is installed or used to interact with a Windows computer or local application.

2. Authorisation

The customer represents that it owns the device or has written authority from the owner and affected organisation. The customer must inform employees and other affected users where required and must not use the node covertly.

3. Capabilities

Depending on configuration, the node may capture screenshots, identify windows, click, type, use clipboard data, read or write approved files, open applications, run approved PowerShell or Python commands and transmit results to RentAgents.

4. Required safeguards

• Use per-device pairing and short-lived tokens.
• Allowlist only necessary applications and folders.
• Require human approval for sending, deleting, publishing, purchasing, credential changes, financial actions and system commands.
• Provide a visible armed/connected indicator and immediate stop control.
• Review action logs and remove stale devices.
• Do not store passwords in prompts or screenshots where avoidable.

5. Local security

The customer is responsible for endpoint security, operating-system updates, antivirus protection, backups, local user permissions, physical access and network controls.

6. No covert monitoring

The node must not be used for secret surveillance, keylogging, unauthorised screenshots, employee productivity scoring, personal-message monitoring or access to private accounts.

7. Liability allocation

The customer is responsible for actions it configures, approves or allows on its devices, including actions initiated by authorised users or agents. RentAgents remains responsible for obligations that cannot lawfully be excluded and for its own breach of the agreement.

8. Emergency suspension

RentAgents may disable a node or related account where there is suspected compromise, unlawful access, abuse or material security risk.