Security

Security by architecture.

Your recorder is never exposed to the public internet. The Agent connects outward only, recorder credentials remain on the site PC, and recorded video stays on your recorder.

Start free How it works
RecorderNever publicly exposed
CredentialsProtected on the site PC
ConnectionOutbound only
WatchLogOperational data and stills
Outbound only

Nothing connects in.

The WatchLog Agent opens connections out to WatchLog. There is no port forwarding, no VPN and no inbound firewall change. Your recorder is never reachable from the public internet, and no public RTSP stream is opened.

  • No port forwarding
  • No inbound firewall rules
  • No public RTSP
  • No VPN into your network
  • Recorder password protected with Windows local-machine protected storage
  • Recorded video stays on your recorder
  • WatchLog receives only the operational data and stills required for configured features
Credentials & footage

The sensitive parts stay on site.

Your recorder username and password are entered at the site and are never sent to WatchLog. On supported Windows installs, the recorder password is stored using machine-scoped Windows DPAPI with file access restricted to SYSTEM and local Administrators. Recorded video stays on the recorder.

Access boundary

What WatchLog can and cannot access.

WatchLog can access

  • Event records such as time, camera and event type
  • Incident stills that passed the on-site filter
  • Configured Analytics Studio measurements
  • On-demand configuration stills used to set up camera rules
  • Health signals such as when each site and camera was last heard from
  • Your account details and report recipients

WatchLog cannot access

  • Live camera feeds through the WatchLog portal
  • Pan, tilt or zoom controls
  • Your recorded footage archive
  • The recorder's credentials
  • A general path into your local network

Tenant isolation

Each customer's data is isolated in the database and covered by automated isolation tests.

Data retention

Incident stills are kept by your plan for 7, 30 or 90 days, then deleted. Event records without images are kept while your account is open.

Account security

Only people you invite can see your tenant data, each with an owner, admin or read-only role. Traffic to WatchLog is over HTTPS.

Plain about the boundary. WatchLog does not do facial recognition, does not provide live camera browsing through the portal, and makes no SOC 2, ISO or similar certification claim it does not hold.

Private by design. See it for yourself.

Keep the recorder private and add an outbound-only intelligence layer.

Start free Check my recorder