At Perimeter Watch™, protecting every individual’s privacy is built into our technology stack and daily operations. The following principles apply whether you deploy our cloud-hosted video platform, an on-prem server, or our portable security trailers with solar/LTE edge gateways.

​

Secure-by-Design Architecture

• Encryption everywhere. Video is protected by modern TLS during transmission and by AES-256 encryption at rest in U.S. data centers that meet SOC 2 and ISO 27001 standards.

• Resilient storage. Footage is automatically replicated across geographically diverse, Tier III-equivalent facilities to remain available during regional outages.

• No data on trailers. Mobile security trailers deliver power and elevation only; they never record or store video.

​

Granular Access & Zero-Trust Controls

• Role-based permissions mirror your organizational hierarchy, down to a single camera, date range, or analytic event.

• Multi-factor authentication is required for every account, and single sign-on (SAML/OIDC) is available.

• Evidence shares use short-lived signed links that expire automatically.

• Immutable audit trails log every play, scrub, download, mask toggle, or policy change.

​

Privacy-First Camera Practices

• Purpose-limited placement. Cameras cover perimeters, gates, parking areas, remote assets—never restrooms, living quarters, or other sensitive interiors.

• Masking and redaction. Digital privacy zones block windows, play areas, or other protected spaces. Exports can blur faces or license plates automatically.

• Audio is disabled by default. Microphones remain off unless expressly required and lawful.

• License-plate analytics. Plate strings are cryptographically hashed and stored separately; retention is capped at 30 days unless regulations require longer.

​

Transparent Retention, Ownership & Portability

• You own all video and metadata.

• Standard retention is 30 days; you may adjust anywhere from 7 to 365 days per camera or rule.

• Bulk export is available at any time in open formats, with no extra download fees or vendor lock-in.

​

Vendor & Sub-Processor Oversight

• All infrastructure partners operate in U.S. facilities audited to SOC 2 and ISO 27001/27017/27018 standards.

• Sub-processors (e.g., SMS providers for MFA or off-site cold storage) sign equivalent data-protection agreements and undergo annual reviews.

​

Regulatory & Compliance Alignment

• Encryption, immutable logs, and access controls support compliance with HIPAA, PCI-DSS, CJIS, state ALPR statutes, and emerging privacy laws.

• Breach-notification workflows meet or exceed every U.S. state’s disclosure timelines, with a contractual target of notice within 72 hours.

​

Continuous Monitoring & Incident Response

• A 24 × 7 security operations center watches for anomalous logins, mass exports, configuration changes, and other red-flag events.

• Suspected incidents automatically escalate to human analysts for containment and customer notification within minutes.

​

Edge Hardening

• Solar/LTE gateways and on-prem servers run a hardened Linux OS and signed firmware and have unused ports disabled.

• Security patches are downloaded and installed automatically via signed updates.

• Optional cellular or satellite failover maintains an encrypted connection if the primary backhaul fails.

​

Your Responsibilities

Perimeter Watch provides the tools; ultimate control of user access and retention schedules rests with you. To make that easy, we deliver monthly permission-review reports and best-practice checklists.

By combining hardened edge devices, secure cloud or on-prem storage, and privacy-by-design field procedures, Perimeter Watch delivers the situational awareness you need, without sacrificing the confidentiality your team and the public deserve.