Monitoring user experience using data blocks for secure data access

A method comprising:

• receiving, from a user device of a plurality of user devices using a cloud-based service availed by an entity, data associated with one or more components of the user device;
• monitoring, using one or more rules and based at least in part on the data, changes to a state of the user device;
• based at least in part on a user identifier associated with the data, determining an identity of a user associated with the user device;
• determining, based at least in part on the monitoring, an occurrence of a trigger event;
• training a predictive model using training data comprising a plurality of historical outputs associated with respective trigger events that occurred at individual user devices of the plurality of user devices;
• at least partly responsive to determining the trigger event, determining an output associated with the trigger event, wherein the output is based at least in part on the identity of the user and the predictive model;
• and
• based at least in part on the output, causing one or more remedial actions to be performed.

One or more non-transitory computer readable media storing computer executable instructions that, when executed, cause one or more processors to perform operations comprising:

• receiving, from a user device of a plurality of user devices using a cloud-based service availed by an entity, data associated with one or more components of the user device;
• based at least in part on a user identifier associated with the data, determining an identity of a user associated with the user device;
• monitoring, using one or more rules and based at least in part on the data, changes to a state of the user device;
• determining, based at least in part on the monitoring, an occurrence of a trigger event;
• training a predictive model using training data comprising a plurality of historical remedial actions and a plurality of historical trigger events;
• at least partly responsive to determining the occurrence of the trigger event, determining a remedial action based at least in part on the identity of the user and the predictive model;
• and
• effectuating the remedial action.