Security You Can Trust
When you're remotely accessing vehicles and programming ECUs, security isn't optional. It's foundational.
Encrypted Connections
Every connection runs over TLS, so session traffic is encrypted in transit between your computers and our servers. Screen and input data passes through a relay and is never written to disk.
Multi-Factor Authentication
Protect your account with TOTP-based multi-factor authentication. Require MFA for all organization members to prevent unauthorized access.
Role-Based Access Control
Define granular permissions for team members. Control who can initiate sessions, manage devices, view audit logs, and administer the organization.
Session Audit Logging
Every session is logged with timestamps, participants, duration, and actions taken. Export logs for compliance reporting and internal review.
Verifiable Downloads
Every release publishes a SHA-256 checksum so you can confirm the file you downloaded is the one we published. Code signing is on the roadmap.
Privacy by Design
We collect only what's necessary to operate the service. Live session video is relayed, never stored — recordings are saved only when you choose to record one.
Infrastructure Security
Signaling Servers
Our signaling infrastructure runs on hardened cloud servers with automatic failover. Connection metadata is encrypted in transit and at rest.
Session Relay
Screen and input data travels over an authenticated TLS connection to our relay, which forwards it to the other side and keeps no copy.
API Security
All API endpoints require authentication via JWT tokens. Rate limiting, input validation, and CORS policies protect against abuse.
Access Control
Every session is scoped to your organization, and the person at the remote computer is asked to approve access before any screen sharing begins.
Compliance Roadmap
We are actively working toward industry-standard compliance certifications.