Security hardware is only as trustworthy as the system behind it. Here's exactly what stands between your devices, your data, and anyone who shouldn't have either.
Every device ships with its own private certificate, issued from our own private certificate authority — no two devices ever share credentials. Before the cloud accepts anything from your hardware, it checks that certificate against the authority that issued it. A device without a valid, unexpired certificate is refused before a single byte of your data is touched.
Each device's private key is generated once, at setup, and never leaves that device. What we store is the matching public certificate — useless to an attacker without the private half. Nothing sensitive — keys, passwords, tokens — is ever written to a log in plain text.
Portal access is scoped by role and by account. A client sees their own devices, contacts and logs — never another client's — and staff access is limited by role, from support up to admin.
Retire or lose a device and its trust is revoked the moment you deactivate it in the portal — there's no lingering window where old hardware can still talk to your account.
Cloud subscription billing is logged manually by our team, not auto-renewed on a stored card. What you're billed is what we've confirmed with you directly.
Shutter Point Security and Home Point Security dispatch over GSM directly — there's no cloud account, no portal login and no subscription in that path. Fewer systems in the loop, for buyers who want exactly that.
Cloud-line event history — every call, SMS, email and app push your account triggered — stays available in your app for 90 days, then moves to long-term archive rather than sitting indefinitely in the active system.