Your account & data

Walled off, encrypted, and backed up.

Isolation

Workspace isolation

Every request re-checks that you belong to the workspace before any data is returned — so one customer can never see another’s screens or content.

Access

Role-based access

Four roles — owner, admin, editor and viewer — so each person gets exactly the access they need, and nothing more.

Encryption

Encrypted in transit & at rest

Everything travels over HTTPS/TLS, and your data is encrypted at rest in the database. Passwords are hashed and never stored in the clear.

Recovery

Backups you can rewind

Automated backups with point-in-time recovery — we can restore to a moment, not just to last night.

Login safety

Brute-force protection

Repeated bad logins lock the account, and every sign-in is rate-limited. New accounts must verify their email first.

Platforms

Trusted infrastructure

Runs on SOC 2-certified platforms — MongoDB Atlas, Vercel and Render — so your data lives on professionally secured, regularly-audited systems.

Your screens

Locked to your content, controlled from your desk.

Lockdown

Device-Owner lockdown

Set up as Device Owner — how our Android media players ship — the player becomes the home screen, hides other launchers and blocks safe boot, factory reset and adding new users, so a passer-by can’t wander off into other apps.

Kiosk

Kiosk mode

Turn on kiosk lock from the dashboard and an Android Device-Owner screen stays pinned to your playlist — touch, buttons and system gestures can’t drop someone out of it.

Remote

Remote control

Control volume and playback on any screen from the dashboard, with restart and screenshot on Android and Windows players — plus kiosk lock, factory reset and enabling or disabling apps on Android.

Resilience

Offline by design

Content is cached on each player, so a dropped connection never blanks the screen — and the cloud is never a single point of failure for what’s on the wall.

Built on

Infrastructure you can name.

Database

MongoDB Atlas

Encrypted at rest, backed up with point-in-time recovery. SOC 2 and ISO 27001 certified.

App hosting

Vercel

HTTPS-only application hosting. SOC 2 certified.

API hosting

Render

HTTPS API hosting. SOC 2 certified.

Content delivery

Bunny CDN

Fast, HTTPS content delivery with a GDPR-focused footprint.

Security question? Just ask.

Need to take PixelFlow through your IT or security review? We’re happy to walk you through any of this.

Talk to us