Security & compliance
Enterprise-Grade Security
ISO 27001 certified, GDPR and CCPA compliant, running on AWS with encrypted storage, TLS everywhere and outbound-only player traffic.
Certifications & compliance
ISO 27001
Information security management system, TÜV Austria certified.
ISO 9001
Quality management system, TÜV Austria certified.
GDPR
Full compliance for EU personal data protection.
CCPA
California Consumer Privacy Act compliant.
Platform & Infrastructure
- Hosted on AWS with daily backups to encrypted S3 storage
- Regular automated vulnerability scans on all production hosts
- Continuous monitoring with documented detection and remediation procedures
- Bug bounty programme with published vulnerability disclosure policy
- Personnel security policies on a strict need-to-know basis
Player & Network Security
- Outbound-only player traffic — no inbound listening ports required
- No port forwarding, DMZ or UPnP needed on your network
- All CMS-to-player communication encrypted via TLS
- Content transferred over HTTPS or SFTP only
- All schedule and config files digitally signed; players refuse unsigned content
- Player storage encrypted: local media, credentials and configuration
- Separate VLAN/subnet recommended for signage devices
Access & Identity
- Two-factor authentication (2FA) available on all plans
- SAML 2.0 SSO on Enterprise tier (Active Directory FS, Okta, OneLogin)
- IP allowlisting for admin login
- Custom role-based access control at workspace level
- Audit logs covering logins, permission changes and content publishing
- Workspaces to isolate departments, brands and regions
- Content approval flows before publish
Secure your network, join the Alliance
Enterprise-grade protection from your first screen.