Security & Data Handling

Data Classification

Define telemetry classes by sensitivity and operational criticality.

Encryption

• Platform APIs and client streams run over TLS; device transport hardening is in active development
• Client credentials live in OS-native secure storage; the local twin cache supports encrypted SQLite

Access Control

• Role-based access by least privilege
• Organization-scoped tenancy — every resource is bound to your organization

Retention Governance

Historical telemetry is retained server-side and queryable through the time-series endpoints.