Security & compliance

Infrastructure & hosting

• The TVpilot platform runs on established cloud infrastructure with data stored in the European Union.
• The application is served globally over HTTPS via a CDN; media files are stored in access-controlled storage buckets.
• Payments are processed by Stripe; card details never touch TVpilot servers.

Data protection

• All traffic is encrypted in transit (TLS 1.2+); data is encrypted at rest.
• Every account's data is isolated with database-level access policies (row-level security): one customer can never read another customer's content.
• Automatic daily database backups allow point-in-time recovery.
• We process personal data under the GDPR. We collect only what the service needs (account email, name, uploaded content, device status) and never sell data.

Device & player security

• Screens are claimed with single-use codes; each player authenticates with its own credentials that can be revoked from the dashboard at any time.
• Players only pull content over HTTPS; no inbound connections or port-forwarding to your network are required.
• The self-healing kiosk (watchdog reboots, crash recovery, auto-reconnect) keeps screens running without manual intervention.

Application security

• Authentication is handled by a dedicated auth provider with secure password hashing; rate limiting protects sign-in and API endpoints.
• Internal endpoints (cron, device APIs) require authenticated, secret-based access.
• Dependencies are kept current and changes are reviewed before deployment.

Availability

We target 99.9% uptime for the player-facing infrastructure. Screens are resilient by design: if the platform is briefly unreachable, players keep playing their cached content and reconnect automatically. Custom SLAs are available on the Business plan.

Responsible disclosure

Found a vulnerability? Please report it to support@tvpilot.app. We respond quickly, will not take legal action against good-faith research, and credit reporters when a fix ships.

Questions

For security questionnaires, data-processing agreements or Business-plan requirements (SSO/SAML, audit logs), contact support@tvpilot.app. See also our privacy policy and terms of service.