Yes. Here are the details of our Security Policy:

Video Window is an always-on video conferencing system that allows for point-to-point and multi-point video communication globally. The system is designed for team interaction via a touchscreen portal.

Video Window places security as the highest priority in the operation of its product. Video Window strives to continually provide a robust set of security features and practices to meet the requirements of businesses for safe and secure collaboration. The purpose of this document is to provide information on the security features and functions that are available for Video Window.

The security features in this document apply specifically to the Video Window conferencing platform.

Video Window Management Portal

The Video Window system is controlled and managed using a proprietary management system. The system holds the following data for the provisioning of Video Window accounts:

• Company (Name, Phone Number and Address)
• Lead Company Contact (Name and Email Address)
• Video Window Login-Name and Password for each registered unit
• Local Site contact (Name, Email and Phone number) – Optional
• Business Logo (image file) – Optional

The Management Portal is accessible in a tiered structure for the following users:

• Video Window staff admin access to all areas of the system
• Distributor access allowing distributors to see their partner network and each partners individual customers.
• Partner Access allowing individual partners to see their clients
• Client access allowing clients to see their Video Window units and make amendments to them.

Infrastructure

The Video Window cloud is a proprietary global network that has been built from the ground up to provide quality communication experiences. Video Window operates in a scalable hybrid mode;
provisioning functions are hosted in the cloud, while real time conference media is processed in globally distributed tier-1 colocation data centres with SSAE 16 SOC 2 Type 2 certifications.

The Video Window Video and Audio solution leverages Oracle Cloud. Oracle Cloud provides a highly reliable, scalable, secure infrastructure platform in the cloud that powers hundreds
of thousands of businesses in 190 countries around the world.

For information on Oracle Cloud's compute, please see https://www.oracle.com/cloud/compute/
For information on Oracle Cloud's security, please see https://www.oracle.com/corporate/security-practices/

Realtime Media Processing

A distributed network of low-latency multimedia software routers connects Video Window’s communications infrastructure. With these multimedia routers, all session data originating from one
Video Window device and arriving at another Video Window device is dynamically routed through this infrastructure. Video conference media is sent via WebRTC channels with codecs VP8, VP9, H264
and future AV1. All media and data channels are encrypted using Datagram Transport Layer Security "DTLS" and Media Streams encrypted using Secure Real-Time Transport Protocol "SRTP"

Firewall Compatibility

During setup, the Video Window client connects via HTTPS (port 443/TLS) to the Video Window servers to obtain information required for connection and to assess the current network environment
such as the appropriate multimedia router to use, which ports are open and whether an SSL proxy is used.

With this metadata, the Video Window client will determine the best method for real time communication, attempting to connect automatically using preferred udp and tcp ports as detailed
on our Firewall Documentation. For increased compatibility and support of enterprise SSL proxies, connection can also be made via HTTPS (port 443/TLS).

Firewall Documentation can be found here.

Video Window App Login

The Video Window software is accessible via the Video Window App. The app is secured with a user name and password. The user name for each Video Window is designated with a client prefix
followed by a unique room reference. The Password for each login is a digit numeric lock code with a requirement of 8 digits, one of which must be a capital letter and one that must be numerical.

User Authentication is done using API integration between the Video Window app and our Management portal REST API where password and authentication details for devices are stored in a
hashed form. Laravel uses AES-256 and AES-128 encrypter, which uses Open SSL for encryption. All the values included in Laravel are signed using the protocol Message Authentication Code so that the
underlying value cannot be tampered with once it is encrypted

Further Queries:

Please contact support@collabsq.com