Each step is a page or an action. The number is how many times it happened — not how many people, because no visitor identifier is stored. A drop to zero means nobody who reached the step above went any further.
"Humans" means: not a known bot, and not one of your own marked devices. It is a best guess from the browser string, not a fact.
A "visit" groups pageviews from the same browser on the same site within 30 minutes. It's an approximation — no ID is stored — but at your volumes it's close enough to trust.
"Direct" means no referrer — typed in, bookmarked, or an app with no referrer header. It is usually you, a bot, or someone who followed a link you sent them personally.
All 16 properties, side by side. If one is quietly outperforming cbomcompliance.com, this is where you'd see it.
Location is city-level and comes from your hosting provider. Cloud-datacenter cities — Ashburn, Santa Clara, Roubaix, Dallas — are almost always bots wearing a normal browser string.
Times are in your local timezone, not theirs. Useful for one thing: knowing when to be at your desk if someone replies to an outreach email.
Matched by browser string. Crawlers that fake a normal string still get through — the giveaway is a datacenter city with a desktop browser and a single pageview.
org/asn value from a reverse-IP provider. Those columns are empty on every row you have ever collected — so the old panel could only ever print "Unknown network," and hot leads could only ever be zero. Bringing it back means adding an IP-intelligence provider, a new data field, and a rewrite of privacy.html §2.5 and your sub-processor table. That's a decision for you to make deliberately — not a panel that quietly implies it already works.