1. Is the 3dEYE platform protected by a Web Application Firewall (WAF) or equivalent inbound filtering?
Yes. 3dEYE uses AWS WAF as its Web Application Firewall for 3dEYE domains. For white-label domains, AWS WAF is available as an optional add-on for an additional fee.
2. What cloud-native security services are used to secure the AWS environment (e.g. AWS GuardDuty, AWS WAF, AWS Shield, Security Hub, CloudTrail, Config, Inspector)?
The following AWS security services are used: AWS WAF, AWS GuardDuty, AWS IAM, AWS Secrets Manager, AWS Certificate Manager, AWS CloudTrail, AWS CloudWatch, AWS Athena, AWS Systems Manager (SSM), AWS Security Hub, AWS VPC, and AWS Inspector
3. Are communications encrypted in transit? If so, which protocols are used?
All communications are encrypted in transit. HTTPS is mandatory, all communication is performed over TLS, and the 3dEYE Push technology establishes a secure tunnel between the camera and the cloud ensuring video streams are secured from the edge to the platform. The tunnel uses AES-256 encryption.
4. Is customer data encrypted at rest? If so, what encryption standard and key management service are used?
Yes. AWS services provide encryption at rest. Video footage stored in Amazon S3 uses server-side AES-256 encryption. Sensitive information is stored using AWS Secrets Manager.
5. Which AWS region(s) currently host customer data?
Data is hosted at us-east-1 region.
6. Is hosting within the AWS Auckland Region currently available or planned?
Personalized Private Cloud installations can be deployed in any AWS Region and Availability Zone, including GovCloud. AWS does not currently operate an Auckland region. The nearest AWS region to New Zealand is Asia Pacific (Sydney) — ap-southeast-2. Deployment outside the standard region is subject to a migration and setup fee, minimum camera thresholds, and revised platform pricing reflecting local infrastructure costs.
7. Are production servers, operating systems and applications vendor supported and patched on a regular schedule?
Yes. Servers are updated to the latest AWS AMIs, security hotfixes are deployed through AWS Systems Manager (SSM) on scheduled updates, and the serverless infrastructure always runs the latest fully patched operating system. 3dEYE also notes that its serverless architecture minimizes patch management concerns.
8. Are production systems monitored using a SIEM or equivalent security monitoring platform with 24/7 alerting?
Yes, 3dEYE production systems are monitored continuously using cloud security and logging services equivalent to a traditional SIEM platform.
Monitoring and Security Architecture
Cloud Security Tools: Utilizes native Amazon AWS services including AWS Security Hub, AWS GuardDuty, AWS CloudTrail, AWS CloudWatch.
Continuous Oversight: GuardDuty provides 24/7 continuous monitoring for malicious activity, unauthorized behavior, and potential threats.
Log Management: Centralized tracking records and audit trails handle application and infrastructure events securely in the cloud.
9. Is disaster recovery regularly tested? If so, what is the approximate testing frequency?
Yes, Full DR test are run annually. However disaster recovery readiness is continuously monitored through Real-time AWS CloudWatch dashboards and automated alerts using AWSCloudWatch, AWS EventBridge, and AWS SNS.
AWS Snapshots and AWS Backups leveraged.
3dEY Infrastructure is Evergreen up to AWS availability.
3dEYE Infrastructure is kept current on AWS services, and failed servers or services are automatically replaced or recovered using Amazon EC2 ASG, AWS ECS, and AWS Lambda.
10. Does 3dEYE hold any security certifications (ISO 27001, SOC 2 etc.) or have a security whitepaper available?
3dEYE operates exclusively on AWS infrastructure, which holds a comprehensive set of third-party certifications including ISO 27001, SOC 1/2/3, PCI DSS, and FedRAMP. These certifications govern the underlying data center, physical infrastructure, and core cloud services.
3dEYE's own application-level security posture is published at 3deye.ai/compliance↗️. SOC 2 certification is currently in progress. Customers may also review AWS's compliance documentation directly via the AWS Compliance Center↗️.
11. Is there a Data Processing Agreement or security/privacy document available that we can provide to clients?
Yes, 3dEYE provides official legal and compliance resources, including their core Data Processing Agreement (DPA).