How Xovis sensors handle image data

Xovis 3D stereo vision sensors use two CMOS lenses to build a real-time stereo depth image inside the sensor. Only metadata leaves the sensor — count values, timestamps, path coordinates. The actual images are never stored and never transmitted. This is a hardware-level privacy guarantee, not a software setting.

Privacy levels (0–3)

GDPR compliance

Xovis sensors can be operated in a GDPR-compliant system. Key responsibilities:

• The system provider (e.g. Vemco Group's customer) is responsible for Technical and Organizational Measures (TOM)

• Control sensor access and user accounts

• Control who has access to the Sensor Master Key

• Define data processing, storage, and retention policies

The sensor itself is not sufficient — the entire system must be compliant, including the platform, integrations, and data storage. Xovis provides a Data Privacy Statement PDF (2023) and AI Note (2025) downloadable from the KB.

Security configuration — Xovis recommendations

• Set a strong, unique password per sensor on first setup — the default password must be changed immediately

• Disable HTTP; access only via HTTPS

• Upload a custom SSL certificate per sensor (replaces the Xovis default)

• Place sensors behind a firewall; restrict to required outbound ports only (see Xovis network requirements article)

• Update sensors to the latest firmware — each release includes security patches

• Do not name sensors with location-identifying names (e.g. not "Oval Office" / "White House")

Built-in security features

• Rate limiter on authentication attempts

• All remote connections over TLS 1.2 or 1.3 only (older TLS versions not supported)

• Serial console access blocked at signal level

• Secure boot chain — tamper protection for TLS certificates and cryptographic keys

• Multisensor connections can use HTTPS

• Diagnostic files (.xdg) are encrypted

• Sensor backup files (.xbak) are encrypted

• API (FW5+) requires authentication — no public API access except for basic sensor discovery

Port management

Administrators can change or disable any sensor port via Settings → Advanced network properties:

• HTTP can be permanently disabled to prevent unencrypted access

• Custom SSL keys and certificates can be uploaded to replace the Xovis default

• Custom Certificate Authorities can be added or removed at any time

WiFi/Bluetooth monitoring (optional feature)

Select Xovis sensors (PC2RE) can monitor nearby WiFi and Bluetooth device IDs (MAC addresses, signal strength). This feature is subject to local legal requirements — in some countries (e.g. Germany) it is not permitted in public areas. The feature includes Allowlist and Denylist support. Administrators are responsible for ensuring legal compliance per deployment location.