Security & privacy
We process camera footage — so we hold ourselves to a higher bar
Here's exactly what we store, for how long, how it's protected, and what we will never do with it. Stated plainly, without overclaiming.
What's stored
Event clips, not continuous footage
Astra23 does not retain a continuous recording of your cameras. When a rule is triggered, we store a short clip around that event plus its metadata (time, camera, rule, confidence). Everything else is analyzed in-stream and discarded.
- Stored: short event clips tied to a triggered rule.
- Stored: event metadata — timestamp, camera, rule, severity, confidence.
- Not stored: continuous 24/7 background footage.
- Not stored: footage from cameras with no active rules.
How it's protected
Retention, encryption, and access
Retention & deletion
Clips are kept only for your plan's retention window, then automatically deleted. You can shorten retention or delete events manually at any time.
Encryption
Footage and event data are encrypted in transit (TLS) and at rest. Edge deployments keep raw video on-site entirely.
Access controls
Role-based access controls determine who in your organization can view flagged clips. Every access is logged.
Our commitment
What we will never do with your footage
- Your footage and detections are used only to generate your own alerts and reports.
- We never sell or share your footage or detections with third parties.
- We never use your footage to train models unrelated to your own deployment.
Compliance posture — stated honestly
We build to align with India's data protection framework (the Digital Personal Data Protection Act) and follow established security practices. We deliberately do not claim certifications we have not yet earned. As our compliance posture matures, we'll state precisely what we hold — and when — rather than imply more than is true today.
Have a specific security question?
We're happy to walk your security or compliance team through the details.