Security
Security is not an afterthought at RMADOR — it is the product. Here is how we protect your data, your infrastructure, and the physical systems we control.
Data in transit
All communication between your cameras, RMADOR servers, and your dashboard is encrypted using TLS 1.3. MQTT messages for bollard control are additionally signed with Ed25519 to prevent replay or spoofing attacks.
Data at rest
Alert metadata and audit logs are encrypted at rest using AES-256. The audit log is append-only with database-level rules that prevent modification or deletion by any user, including RMADOR administrators.
Authentication
RMADOR uses short-lived access tokens with RS256 signing. Multi-factor authentication (TOTP) is available for all accounts and required for supervisor-level actions such as bollard raise. Biometric re-authentication is required on the mobile app for critical actions.
Access control
All access follows the principle of least privilege. Operators, supervisors, and security administrators each have distinct permission sets. Role changes are logged in the audit trail. API access uses scoped tokens with configurable expiry.
Video and camera data
Raw video footage never leaves your site. RMADOR processes camera feeds on dedicated hardware and discards the raw frames immediately after inference. No video is stored by RMADOR. Evidence clips generated for alerts are stored locally under your control.
Vulnerability disclosure
We take security vulnerabilities seriously. If you discover a security issue, please disclose it responsibly by emailing [email protected]. We aim to acknowledge reports within 24 hours and resolve critical issues within 72 hours.
Penetration testing
RMADOR conducts regular automated security scanning and periodic third-party penetration testing. We maintain a SOC 2 readiness programme and target Type II certification.
Report a vulnerability
Email [email protected]. Please include a description of the issue, steps to reproduce, and your contact details. We will respond within 24 hours.