Lotus sees what you're working on. Never the work itself.
Automatic time tracking only works if people trust it enough to leave it running. Lotus was built from the ground up to read the labels around your work, the file's name, the client, the calendar entry, never the words inside it. No screenshots. No keystrokes. No reading your files. The time you mark personal stays personal; your firm sees your timesheet, not your day.
The line Lotus never crosses.
Lotus reads the labels around your work, enough to know which client and matter a block of time belongs to, and nothing more. Here's exactly where the line sits, on every device Lotus runs on.
On your desktop
The application you're in, the document or file name, the window or tab title, the web address.
What's inside any of it: not the text of a document, not the body of an email, not a message, not a screenshot, not a keystroke, not your screen.
From your calendar
That a meeting happened, when it was, its subject line, and who was there, so the time is accounted for.
What's written inside invitations, notes, or attachments.
On the mobile app
Arrival at and departure from client sites you've agreed to, via geofencing, so on-site visits are recorded.
Your live location. Lotus checks whether you've reached a known site; it never follows where you are or builds a trail of your movements.
Across every surface, the rule is the same: Lotus knows that you were working, and who for, never what you wrote, read, or said.
Your day is yours.
Privacy isn't only about what Lotus captures; it's about what stays in your hands.
Your personal time is yours.
Time you mark as personal never enters the record your firm sees, at any level, in any report. Lotus is there to build an accurate billable record.
Location is opt-in, and never live.
Geofencing on the mobile app is yours to turn on or off. Even on, it only ever detects arrival and departure at agreed sites, never a live location trail.
Nothing happens without your say-so.
Lotus builds a draft timesheet; you review, adjust and approve it. Nothing is finalised, and nothing flows to any other system, until you've confirmed it.
The AI has a defined job, and it's optional.
AI lives inside the Insights module and nowhere else; it deepens what Insights can tell you, and nothing else in Lotus relies on it.
Confidentiality wasn't a feature. It was the brief.
Most tools that track time automatically do it by watching the person: screenshots, keystrokes, live location. That approach was never an option for the firms Lotus is built for. When you hold confidential files and answer to clients who expect discretion, a tool that surveils your people is a tool you can't install.
Lotus started from the opposite end: capture time accurately without ever seeing the work or watching the person. Every decision since, from what the agent records to where the data goes to what the AI is allowed to touch, has been filtered through one question: does this protect the confidentiality our firms depend on? If it doesn't, it isn't in the product.
Bringing this to your IT team?
Good: they should ask hard questions, and we're glad to answer them. Security and confidentiality are first principles in how Lotus is built.
Every firm's requirements are different, so rather than a one-size-fits-all page, we'd rather talk through yours directly: what you need to know, what your policies require, and how Lotus fits.
Trust is easier to see than to describe.
The best way to understand how Lotus protects your firm is to watch it work: what it captures, what it doesn't, and how the control stays with your team. Twenty minutes, no obligation.