Security

SeeItLive handles live video from your customers, so security is built into every layer. This page explains how keys, sessions, captures, and accounts are protected — and what you can do to keep them safe.

API key security

API keys authenticate requests to the SeeItLive API. Anyone holding a key can start sessions billed to your account, so treat them like passwords.

  • Keep keys on your server — never ship them in browser or mobile-app code.
  • The full secret is shown only once, at creation. Store it in a secrets manager.
  • Rotate a key immediately if you suspect it was exposed, then delete the old one.
  • Use a separate key per environment (test vs. production) so you can revoke one without breaking the other.
Heads up

If a key ever appears in a git commit, a log, or a support ticket, rotate it right away — assume anything logged can be read.

Session privacy

Live video is streamed peer-to-peer and is not recorded by default. The stream is encrypted in transit, the customer controls their own camera, and they can stop sharing at any moment. Only the snapshots an agent deliberately captures are stored.

Snapshot audit log

Every snapshot is written to the session's audit log with a timestamp and the agent who captured it. That gives you an accountable record of exactly what was captured and when — useful for compliance, disputes, and internal review.

Account security

Your SeeItLive account supports modern sign-in protections so a leaked password alone can't let someone in:

  • Multi-factor authentication — add a second step (authenticator app or SMS) at sign-in.
  • Passkeys — sign in with your device's biometrics instead of a password.
  • Single sign-on — larger teams can connect their own identity provider (OIDC or SAML) and enforce SSO for everyone.
Tip

Turn on multi-factor authentication for every agent who can run sessions — it's the single biggest win for account safety.

Data handling

SeeItLive stores only what a session needs: the snapshots agents capture and the session's metadata and audit log. Live video isn't retained. For the full details on data retention and processing, see the trust page and privacy policy.

Security