Ava Display › Security and privacy

Security first, and nothing personal to lose.

The safest answer to a records question is not a promise. It is a product that never holds the records in the first place.

Invisible on the network

No AirPlay, no Google Cast, no Miracast discovery. Nobody on your network can see a display, let alone connect to one. Every session is opened by an authenticated staff member, and the port stays closed until it is.

No inbound anything

Displays make outbound connections only, so nothing is exposed and no inbound ports are opened. Most networks need no changes at all. If yours is locked down, the configuration guide ships with the hardware.

It holds no personal records

The people who walk past your screens do not sign in, have no account, and are never asked for anything by it. Content moves from authorized staff to screens, and the only way anyone else reaches a screen is when a host deliberately invites them and then accepts the request. There is no personal record here to breach.

A guest can still present

When a host wants somebody else to take the screen, the host puts a code on the screen itself, as digits and as a QR code. Scanning it asks for the screen and nothing appears until the host accepts. It answers on the organization's own declared networks only, for that session, and the person taking the screen needs no account.

Security first, and nobody else holding your data

We run our own platform on our own servers. Your organization does not appear in a third-party marketing database, a sales tool, or an analytics product, because there are none in the path. There is no vendor behind the vendor.

The design is zero trust throughout: screens carry device credentials rather than anybody's personal login, each device can be revoked on its own, and permission is granted by role rather than assumed from being on the network.

✓

Nothing to disclose in a breach. The product holds no personal records at all, so the safest answer to a records question is structural rather than promised.

✓

Encrypted in transit and at rest, with per-file keys, and deletion that destroys the key rather than hiding the row.

✓

Every action attributable. Casting and broadcasts are recorded against the staff member who performed them, and the record is yours to review.

✓

Nothing shared between customers. One customer cannot reach another, and no customer data is used to improve anything for anyone else.