For admins

Admin & compliance

Toggles, audit trail, billing, rollback. Everything an admin needs to run Connect confidently in production.

Feature toggles

Connect is not all-or-nothing. Four sub-features flip independently from Settings → DeskTrust Connect:

Master switch (Enable Connect) — required for any Connect UI to appear.
Team chat — DMs and group rooms.
Voice + video calls — with in-call screen share.
Manager-initiated screen viewing — the consent-first flow.
Call recording — server-side capture.

All four are OFF by default when you enable the add-on. You turn on what you want your team to use.

The screen-view audit page

Every manager-initiated screen-view request writes an immutable audit row. Dashboard → Screen-View Audit shows the chronological log.

Filter by event type: requested, approved, denied, expired, cancelled, revoked (employee stopped mid-session), ended.

Each row includes:

Timestamp
Actor (manager or employee) and target employee
Jurisdiction (from the employee\'s country code)
IP address and user agent (best-effort — trust your infra)
Reason text (if the manager provided one)
Request ID + linked session ID (if the request went active)

Manager-scoped admins only see rows for employees in their managed groups. Org admins and super-admins see all.

Billing

Dashboard → Billing → DeskTrust Connect:

Enable Connect — adds the add-on to your existing Stripe subscription. Starts a 14-day free trial.
Cancel add-on — removes the line item from your subscription. Access remains until the current billing cycle ends.
Trial state and next-bill date are shown when applicable.

The webhook keeps Organization.connectAddOnActive in sync with Stripe on every subscription change — no manual reconciliation needed.

Employees who opt out

Any employee can pre-emptively opt out of manager-initiated screen-view requests. This is a hard refusal — no manager can override it. Attempts are logged with refusal: employee_blocked.

Where the toggle lives: for now, in the database. Set EmployeeFeaturePreference.blockScreenViewRequests = 1 for the employee\'s row. A self-serve UI is on the roadmap.

Consent disclosure text

The employee-facing consent language shown at approval time varies by jurisdiction. The default text is at src/lib/connect/consent.js — 5 buckets:

us-two-party — US, Canada (conservative)
uk-eu — GDPR-covered UK and EU
gcc — Kuwait, UAE, Saudi Arabia, and other GCC states
anz — Australia and New Zealand
default — everything else

Legal review required before shipping to real customers. The default copy is a defensible starting point, not counsel-approved final language. Ask your lawyer to replace or amend it as needed for the jurisdictions you operate in.

Rollback procedures

Because Connect ships as an add-on with hard feature flags, rollback is per-org, not global.

Turn off for a single org (soft)

Settings → DeskTrust Connect → toggle the master switch OFF. Save.

In-flight calls end immediately. Chat history is retained.

Turn off subscription-side

Dashboard → Billing → DeskTrust Connect → Cancel add-on.

Access continues until current billing period ends. Then the umbrella flag flips false automatically via the Stripe webhook.

Deployment-wide kill switch

Your DeskTrust deployment administrator can set CONNECT_ENABLED=false in the server\'s environment and restart the process. All Connect features refuse cleanly across every org until re-enabled. Chat data is preserved.

Data on account close

When an org closes its DeskTrust account, all Connect data (chat, sessions, recordings, audit log) is included in the archive process. No separate Connect purge is required.