IT review — Pinpoint

Two steps

1. Read the data and security summary on this page (about 5 minutes).
2. Download the app and run the checklist on your staging URL in an approved evaluation workspace.

Product scope

• Pinpoint is a desktop app that opens the site URL you review and collects feedback via comments and the board.
• It does not inject code or scripts into the website under review.
• Account, workspace membership, comments, attachments, and collaboration data are processed to provide the service; content belongs to you or your workspace.
• Built for agencies and enterprise product teams that prefer not to add code to client sites.

Desktop install — data scope

Pinpoint is a narrowly scoped desktop app for website project feedback. Work data flows through your workspace and the review URLs your team opens.

Where data flow is bounded

• Workspace content: comments, tasks, project metadata, and files users attach.
• Site review: the address opened inside the app.
• Connectivity: encrypted service communication for session and sync.
• Updates: official distribution channel; uninstall ends the local install.

During evaluation, your IT team can observe network traffic with its own proxy or firewall tools; the checklist is designed to verify this scope.

Security controls (summary)

• Client–server communication uses encrypted transport (TLS).
• Workspace-scoped access: only invited members see projects.
• Role model: the workspace owner manages invites and access.
• Project data can be exported; comments and projects can be deleted in the app.
• Optional AI integration uses a separate key; when disabled, external assistants have no access.

Commercial confidentiality

Infrastructure vendor names, architecture diagrams, and implementation details are not published on this page. For serious enterprise reviews, additional information may be shared on request during the approval process.

Test checklist

In your evaluation workspace, use only a staging or test URL. Live customer data or production sites are not recommended.

• Network trafficProxy or firewall logs show encrypted Pinpoint service connections consistent with this evaluation scope.
• Desktop scopeTraffic stays aligned with workspace sync and the staging review URLs your team opens.
• Staging site reviewA test URL opens; comments pin where you click and teammates can see them.
• Roles and invitesUsers without an invite cannot access the workspace; roles behave as expected.
• Comment deletionDeleted comments disappear from the list and the site view.
• Project exportProject report or .pin backup file can be downloaded.
• Member removalRemoved members lose access to projects.

How to run the checklist

After your evaluation workspace is approved, IT and product/design run through the list together. Total time is about one hour.

Prerequisites

• Approved evaluation workspace
• Staging or test URL (do not use live/production sites)
• Two test accounts (IT + product or design)
• Optional: corporate proxy or firewall log access

• Network traffic

  IT~15 min

  While the app is open, monitor proxy or firewall logs during sign-in and sync. Traffic should match the data scope on this page. If you have no proxy, skip with a note and continue with product tests.

• Desktop scope

  IT~10 min

  In the same session, open only your staging review URL; logs should stay aligned with workspace sync and that address.

• Staging site review

  Product / design~10 min

  Open the staging URL, add a comment on a point, and confirm it appears on the second account.

• Roles and invites

  IT or workspace owner~10 min

  Try access with a non-invited account (should fail). Then add a second user via invite code or email invite (should succeed).

• Comment deletion

  Product / design~5 min

  Delete the comment and confirm it disappears from the list and site view on both accounts.

• Project export

  Product / design~5 min

  From the project menu, download a report (PDF/Excel/JSON) or a .pin backup file and confirm the file is created.

• Member removal

  Workspace owner~5 min

  Remove the second user from the workspace and confirm they can no longer access the project.

Estimated total: about 1 hour. IT usually covers the first two items; product completes the rest on staging.

Evaluation workspace

• Submit a workspace access request from the landing page with your work email and use case.
• After approval, your team (recommended: up to 5 people) runs this checklist on a staging project.
• When the review ends, the workspace can be closed or moved to production use.