Information Security

Position

VogicAI is designed to run inside infrastructure the customer owns and controls. The platform does not require operational video, imagery or identity data to be routed through a public cloud, and it supports environments with no external network connectivity at all.

Deployment topologies

Security posture determines architecture, not the other way round.

• Edge — inference near the camera or data source
• On-premise — the full platform inside customer data centres
• Private cloud — a dedicated, isolated cloud environment
• Hybrid — edge inference with local or private-cloud aggregation
• Air-gapped — no dependency on public internet connectivity

Access and accountability

Operator actions in sensitive workflows — identity searches, watchlist edits, evidence export — are attributable and logged.

• Role-based access control
• Multi-site and per-zone access scoping
• Audit logs for search, match and export activity
• Configurable data retention and deletion

Data protection

Data is encrypted in transit and at rest. Key management can be aligned to the customer's existing standards, including deployments where key custody remains entirely with the customer.

Software and model updates

Platform and model updates are delivered as verified packages. In air-gapped environments, updates are applied through a controlled offline process with customer approval — there is no silent auto-update path into a secure site.

Certifications

Compliance and certification status is provided on request during technical and procurement evaluation. We do not publish certification claims on this website that have not been formally issued.

Reporting a vulnerability

If you believe you have found a security issue in a VogicAI product or in this website, write to [email protected] with the subject line "Security". Please include enough detail to reproduce the issue, and allow us reasonable time to respond before public disclosure.