Enterprise Security & EU Data Sovereignty
Built from the ground up for strict GDPR compliance, zero third-party video sub-processors, and complete media data residency.
100% EU Data Residency
All media streaming, WebSocket signaling, and backend databases (PostgreSQL & Redis) are self-hosted strictly on European VPS infrastructure. No data leaves EU jurisdiction.
Self-Hosted Video Infrastructure
We run a dedicated open-source LiveKit Selective Forwarding Unit (SFU). Video and audio streams flow directly between users and our EU servers—never routed through US SaaS providers (no Zoom, Twilio, or Daily.co).
Zero Third-Party Media Tracking
No participant metrics, video feeds, or session metadata are shared, harvested, or sold to third-party ad or tracking networks. Your classroom data is yours alone.
End-to-End Encryption in Transit
WebRTC media packets are encrypted with DTLS-SRTP. WebSocket signaling uses TLS 1.3 / WSS protocols. Every byte is protected from browser to server and back.
Compliance & Technical Architecture
- Standard WebRTC transport encryption (DTLS-SRTP).
- Ephemeral in-memory video processing (no persistent stream logging unless explicitly recorded by room host).
- Self-hosted STUN/TURN relays for ICE NAT traversal.
- Full alignment with EU Regulation 2016/679 (GDPR) and Article 44 US data transfer rules.
Need a Data Processing Addendum (DPA) or Security Assessment?
Our compliance team can provide institution-specific documentation, including DPAs, sub-processor lists, and technical security questionnaires.
Contact Compliance Team