For IT and Security Teams
IT and security information
This page exists so a scheduler can forward one link instead of writing a business case. It states plainly what PathProof installs, every network call it makes, and what never leaves the machine. If something your review needs is missing, email support@zenithappfoundry.com and we will answer it directly.
The short version
- No administrator rights required. PathProof installs per-user into the user's own profile. Nothing is written to Program Files or the registry's machine-wide hives unless an administrator deliberately chooses a machine-wide install.
- Schedule files are never uploaded. Parsing and all analysis (DCMA 14-point, Monte Carlo, schedule comparison, update integrity) run locally on the workstation. There is no server-side processing of project data and no cloud storage of it.
- Code-signed on both platforms. The Windows installer is signed with an EV code-signing certificate; the macOS build is signed with an Apple Developer ID and notarized by Apple.
- Installers are served from this site (pathproof.app/downloads/). Browsers that score files by download volume, such as Chrome Safe Browsing and Microsoft SmartScreen, can caution that a recently published release is "not commonly downloaded" while that volume builds. The signature is the authoritative check: right-click the installer and inspect Digital Signatures on Windows, or run codesign --verify on macOS.
- No advertising, tracking or analytics SDKs are embedded in the desktop application.
- Uninstalls cleanly through Windows Apps & Features, or by deleting the application on macOS.
What gets installed, and where
PathProof is a self-contained desktop application. It installs no drivers, no services, no browser extensions, no scheduled tasks and no kernel components, and it does not require or modify an installation of Microsoft Project or Primavera P6.
- Windows: a signed Inno Setup installer that places the application in %LOCALAPPDATA%\Programs\PathProof and creates Start Menu and optional desktop shortcuts for the current user. An administrator may instead choose an all-users install into Program Files.
- macOS: a notarized disk image; the user drags PathProof.app to Applications (or to their own ~/Applications folder, which needs no admin rights).
- Application data: licence details, saved preferences and, if the user configures one, an AI provider API key are stored in the user's own application-support directory. No data is written to shared or system locations.
Every network call PathProof makes
This is the complete list. All connections are HTTPS.
| Host | Purpose | What is sent |
|---|---|---|
| licences.zenithappfoundry.com | Licence and trial validation at application start. | Licence email address and key once registered; during the free trial, only a salted one-way hash of the operating system's machine identifier plus the application version. No hostname, no MAC address, no username, no project data. |
| downloads.zenithappfoundry.com | Update check: is a newer version published? | Application identifier and platform only. Updates are never installed silently; the user is told and chooses. |
| api.anthropic.com or api.openai.com | Optional AI assistant. Off unless a user enters their own API key. | Only when the user asks the assistant a question: the question and the schedule extracts needed to answer it, sent directly from the workstation to the provider under the organisation's own API account. Nothing routes through our servers. Leave this unconfigured and no AI call is ever made; every other analysis works without it. |
If the licence and update hosts are unreachable, for example on a restricted or offline network, PathProof keeps working. Neither check is a gate on analysis.
Data handling and residency
Project schedules, task data, dates, resources and analysis results stay on the workstation. The only personal data we hold is what a user gives us to issue a licence: email address, optional name and company, plus the licence's own activity record. That data sits in AWS in the Sydney region (ap-southeast-2), under an Australian company, Zenith Consulting Services Pty Ltd (ABN 29 918 988 901). See the privacy policy for retention and deletion, and the licence terms for the contractual position.
Evaluating without an install
If installing anything at all needs approval first, two options that need nothing from IT: the demonstration video on the home page walks through a real analysis end to end, and we will run your own schedule through PathProof and send back the reports so you can judge the output before anyone signs off on software. Email support@zenithappfoundry.com. Ask us for a redacted example first if sending a live programme is the sticking point.
Current beta status
PathProof is in beta and free to use, including the first 7 days with no registration at all. It is a young product from a small Australian company, which is worth saying plainly in a security review: there is no SOC 2 report and no ISO 27001 certificate today. What there is instead is an architecture where the sensitive material, your schedules, never leaves the machine, so the trust question is much smaller than it would be for a tool that asks you to upload them.