Your video is yours. Here’s how we keep it that way.

The short version

• The AI that watches your video runs on the camera in your home, not in the cloud.
• Your video goes from your camera to your phone. It isn’t stored on our servers, and we can’t decrypt it.
• There’s no Veilix account, so there’s no password for anyone to steal.
• Only phones you pair in person can connect, and each one gets its own key.

Where everything runs

On the camera: the video, a motion check, and the AI that recognizes people, vehicles, animals and more. The camera sends live video and alerts only to phones you’ve paired.

On your iPhone: live view, alert rules, notifications and recorded clips.

Outside your home: only what’s needed to connect your phone to your camera when you’re away. That connection is end to end encrypted (see below).

Pairing

• In person, by QR code or PIN. The camera shows a one-time code that expires after 5 minutes and only works on your own network.
• A key for every phone. Each paired phone gets its own random key, so one phone can be removed without affecting the others. The first phone paired is the owner and can remove other phones.
• Keys are protected at rest. Your phone keeps its keys in the iOS Keychain, available only on that device and only while it’s unlocked. The camera stores only a scrambled fingerprint (a hash) of each key, so a copy of its storage can’t be used to connect.

Watching from away

• End-to-end encrypted. Video is encrypted on the camera and decrypted only on your phone. The encryption keys are created on those two devices and never leave them.
• Usually direct. Most of the time the video goes straight from your camera to your phone. When networks block that, our relay passes the encrypted video along. It doesn’t have the keys, so it can’t see anything.
• Tamper-proof setup. The messages that set up each connection are signed and encrypted by your camera and phone, so our servers can’t read them, change them or slip themselves into the middle.
• Open source. The connection software, Veilix Connect, is open source so anyone can check all of this. You can also run it yourself, for free.

Alerts

Alerts reach your phone even when the app is closed. The details (what was seen, and which camera) are encrypted so that the service delivering the notification can’t read them.

What’s stored, and where

• On your phone: camera details, alert rules, detection history and clips, inside the app, protected by iOS’s built-in file encryption. Snapshots and manual recordings are saved to Photos.
• On the camera: recent detections, a snapshot of each, and the list of paired phones.
• With Veilix: never your video, images or alerts. To connect you remotely, our service sees only what it needs to, like when a connection happens. The app has no account and no analytics.

In progress

• A password-protected setup network. During first-time setup the camera briefly creates its own Wi-Fi network for your phone to join. We’re adding a password to it, printed on your camera.
• An independent security audit is on the roadmap before launch.

Reporting a problem

If you find a security issue, email security@veilixlabs.com.