Skip to main content
For:Site IT · Security and compliance reviewers
AitriumOS installers are code-signed and independently verifiable. This page documents the integrity controls and the validation performed on a release.

​
Endpoint protection (EDR / antivirus) compatibility

There are no known incompatibilities with endpoint-protection (EDR / antivirus) products. AitriumOS is a code-signed application that runs in the user’s context. As with many clinical/imaging desktop tools, an endpoint-protection product may apply heuristics to a few legitimate behaviors; if needed, the cleanest approach is to allow the application by:
  • Code-signing publisher — the installers are signed via Microsoft Trusted Signing; the publisher is shown in the file’s Properties → Digital Signatures tab.
  • Install path — by default, the per-machine (MSI) installer installs under C:\Program Files\ (e.g., C:\Program Files\AitriumOS\), and the per-user (NSIS) installer installs under %LOCALAPPDATA% (e.g., %LOCALAPPDATA%\AitriumOS\). The application executable is NewLeaf.exe; allow it in per-application network rules so the direct SFTP transfer is not blocked (see Deployment & updates).
  • Application data directory — %APPDATA%\newleaf.ai\ (Windows roaming app-data; this is the runtime data folder, distinct from the install path above).
For awareness, behaviors an EDR may flag heuristically: the bundled imaging helper executables, the spawning of these helpers as child processes, and the in-app updater downloading and launching a signed update.
Endpoint-protection results are policy-dependent, so a behavioral pass in your own EDR environment is the authoritative test. Aitrium can support a validation pass on request.

​
Privileges & OS compatibility

  • No local administrator privileges are required for normal operation under either installer; the per-user (NSIS) installer also installs without admin rights.
  • Windows 11 (64-bit / x64) is supported; WebView2 is included with Windows 11.

​
Validation performed

The following checks are run against each release. Results below are for v2.2.7 (x64), recorded 2026-09-30.

​
v2.2.7 hash manifest (SHA-256)

Independent verification (VirusTotal, scanned 2026-09-30):