Privacy &
Security
To ensure your video meetings are both secure and private, it's important to choose an API with the right features and measures for protecting your data.
BEYOND
END-TO-END ENCRYPTION
Using end-to-end (E2E) encryption is an essential measure for any business that handles sensitive data, as it provides a secure connection between two parties involved in the conversation and ensures that only they can access the data.
While there are 2 people, Eyeson API delivers the video to each other E2E encrypted. It uses the SFU mode of the Eyeson API.
100% Encrypted – at rest & in transit
When more people get added, the Eyeson API switches to MCU mode and delivers security in a different way. Everyone gets connected to the MCU and the MCU mixes the streams into one stream which gets delivered. We use AES-256 to encrypt streams in transit and at rest. Furthermore, the streams are protected by DTLS while in transit.
This principle of just enough access is also true for all streams coming to the MCU. Data shown in a video call is never submitted and stays in your system. What is transmitted is an image of the data. This is very important for enterprises with tiered access to private or sensitive data.
In most installations, there is a login with additional security features before the meeting can be started. These range from hardware devices to 2-factor authorization.
Eyeson standard security & privacy features
- Cloud-based infrastructure – which is easily scalable. There is no need for downloads or installations for participants.
- Deploy where you want. Stay legally compliant and deploy on any cloud provider. If you prefer you can even deploy on-premise.
- It works on every device and platform. Due to the architecture, it also works on devices with limited bandwidth.
- 100% encrypted in transit and at rest. We use DTLS and AES-256 encryption to prevent 3rd parties hacking.
- Limit access and secure video meetings by encrypted links and the possibility to lock meetings.
- Everything is temporary. With our temporary servers, there is only temporary data. If you do not record and store the recording, everything will be available only for the lifetime of the video meeting.
- 100% Privacy by design. We are compliant with GDPR, CCPA/CPRA, HIPAA and most probably also to similar privacy laws.