Trust
Built with the DPDP Act in mind.
Not “compliant”. Plain facts, lawyer-reviewed before launch, with a one-pager for procurement and IT.
Hosting
Cloud workloads run in-region [MOCK: confirm region before publish]. Edge-box sites process video on your premises with no cloud at runtime. Region and data-residency terms are written into your order form — ask for them.
Encryption
Streams and dashboard traffic encrypted in transit (TLS); stored footage and clips encrypted at rest [MOCK: confirm cipher/KMS before publish]. Keys and exact controls are documented for procurement review.
Retention
Retention follows your plan — trial 10 days, Starter 15 days, Professional 30 days, Enterprise custom. Trial footage is deleted when the trial ends. Edge-box logs stay on the box.
Access + audit
Role-based access: guards see clips, managers see analytics, admins see everything — every view audit-logged. Customer footage is never used to train shared models without written agreement.
DPDP approach
- Purpose-limited processing: security, safety and operations intelligence — nothing else
- Data minimisation: behaviour and counts by default, not identities
- Notice and consent workflows where the deployment touches employees or visitors
- Retention schedules with deletion — footage doesn't accumulate by default
- Breach-notification support with logs your IT team can actually read
What we ask of you
Post signage where cameras operate, keep your own retention policy current, and name the people authorised to review footage. Our responsible-use rules cover the rest.
Certifications today: none of SOC 2 or HIPAA. We say so plainly.