The Drata agent is a lightweight osquery agent that is read only that reads things like - screen saver timeout, auto-updates turned on, is AV software installed, etc. We collect that data to show the device is compliant with the companies policies and the compliance frameworks they have agreed to. The company this person contracts with requires the agent be installed to monitor compliance for all devices, employee and contractor. Most companies these days require devices meet xyz requirements around patching, av/edr, etc. if they hold company data.
It never "key logs" anything or collects any of that type of information.
Our agent has been third party security validated and we are happy to share the report with any prospect/customer as well as the configuration.
Source: Work for Drata as the CISO