Security and Compliance for Enterprise Screen Networks
Compliance Posture
Verified Compliance, Documented and Auditable
A formal compliance program suitable for healthcare, financial services, and government deployments — with data residency where your regulators expect it.
- SOC 2 Type I
- A verified, independently examined compliance program covering security policies, vulnerability management, incident response, and personnel training — documentation your security review can work with.
- GDPR
- Privacy-respecting defaults with tenant-scoped isolation, plus data export and deletion workflows that let you meet subject access and erasure obligations without filing support tickets.
- Five Data Regions
- Choose where your account data lives: United States, European Union, United Kingdom, Canada, or Asia-Pacific. Data residency requirements stop being a procurement blocker.
Identity & Access
Your Identity Provider Stays in Charge
SAML SSO, SCIM provisioning, and granular role-based access control let content, development, and operations teams share one platform safely — with audit logging across every action.
- SAML SSO
- Single sign-on with Active Directory, Okta, and Azure AD. Your identity provider stays the source of truth for who can reach the console.
- SCIM Provisioning
- Automated user provisioning and deprovisioning from your directory. When someone leaves the org, their TelemetryOS access leaves with them.
- Role-Based Access Control
- Granular, customizable roles separate content managers, developers, and operations teams — each sees only what their job requires.
- Audit Logging
- Every console action is logged with who, what, and when. Combine with proof-of-play CSV exports for an accountability trail auditors accept.
Hardened at the Edge
Devices Built to Be Trusted on Your Network
Every Node device runs a locked-down appliance OS with sandboxed applications and encrypted, certificate-authenticated connections — designed to pass the same scrutiny as any other managed endpoint.
- Locked-Down Appliance OS
- Node devices run a purpose-built operating system with a minimal attack surface — nothing installable by hand, no exposed desktop, no drift from a known-good state.
- Application Sandboxing
- Every screen application executes in containerized isolation. A misbehaving app can't touch the OS, other applications, or your network beyond what it's granted.
- End-to-End Encryption
- HTTPS/TLS secures all user, API, and device traffic, with certificate-based device identity and network segmentation in a zero-trust architecture.
- Automatic Updates with Rollback
- Over-the-air security patches apply atomically in the background and roll back automatically if anything fails. Fleets stay patched without maintenance windows.
Edge AI, Private by Design
On-Device AI That Keeps Data On-Site
When you add Edge AI to your fleet, the security model doesn't change — inference runs on the device, so camera feeds and conversations never leave your premises.
- On-Device Inference
- Edge AI runs language models and computer vision directly on Node Max. Camera feeds and conversations are processed where they happen — on your premises.
- No Cloud Round-Trip
- Inference runs in a hardened on-device environment with no PII stored and no footage leaving the site. The privacy review gets dramatically shorter.
- Built for Regulated Spaces
- Keeping data on-site is what makes AI deployable in healthcare, gaming, and government settings where cloud video processing is a non-starter.
Enterprise Governance
The Controls Your Security Review Asks About
Token management, data lifecycle workflows, audit-ready reporting, and expert support — built into the platform, not bolted on.
- API Token Management
- Scoped API access with token rotation and instant revocation for integrations and CI/CD pipelines.
- Data Export & Deletion
- Self-service export and deletion workflows for meeting GDPR and internal data-retention policies.
- Proof-of-Play Exports
- Timestamped playback logs and CSV exports give advertisers, regulators, and internal audits verifiable records.
- Tenant Isolation
- Privacy-first defaults with tenant-scoped access isolation across every layer of the platform.
- Zero-Trust Networking
- Certificates, segmentation, and least-privilege access control between devices, cloud, and users.
- Security Specialists
- Direct access to security engineers for deployment reviews, architecture consultation, and questionnaire support.
Bring TelemetryOS Through Your Security Review
See the compliance documentation, identity controls, and device hardening for yourself — or talk pricing for your fleet.