Security and compliance

Privacy without sacrificing visibility.

VAKT is designed so residents keep their dignity and facilities keep control of their data. Here is exactly what we collect, where it goes and how it is protected.

Privacy by design

Built to collect less.

No video or audio captured

VAKT senses changes in wireless signals. It never records images or sound, so there is no footage to store, leak or misuse.

Nothing worn

Residents carry no device, so there is no personal tracker following them around the building.

Rooms, not people

VAKT works by room. Storing resident names is optional for each organization, and the app shows rooms rather than names.

Processed on site

Raw signal data is processed in the facility and never sent to the cloud. Only processed alert and status signals leave the building.

A resident reading quietly in her own room

Data flow

What stays on site, and what doesn't.

Each layer of VAKT handles only the data it needs.

On the node

Sensing

  • Raw wireless signal measurements
  • Movement, breathing and heart rate calculated on the device
  • Joins only the hub's private network, never your facility WiFi
On the hub

Inside your building

  • Event detection and the facility's live record of nodes and alerts
  • Drives corridor lights and annunciators locally
  • Setup page available on site only
  • Raw signal data stops here
Cloud or on site

Google Cloud, or your own servers

  • Processed alerts, events, room status and vital-sign readings
  • Your organization and facility directory
  • Staff accounts and sign-in
  • Staff apps connect to this service, never directly to the hub
  • With a fully on-site deployment, this layer runs inside your facility too

Never collected

  • Video
  • Audio
  • Location tracking of individuals
  • Raw signal data in the cloud

Connection options

Deployed to suit your IT and security requirements.

Nodes always run on VAKT's own private network. How the hub reaches the outside world is your choice.

Through your network

The hub connects out through your facility's internet connection. Nodes stay on VAKT's private network and never join yours.

Dedicated 5G

The hub uses its own 5G connection and never touches your network at all.

Fully on site

The complete system is hosted inside your facility, for organizations that require data to stay on their own premises.

Cybersecurity

Layered controls, from the node to the app.

Isolated sensing network

Nodes connect only to a private network created by the hub. They never join your facility WiFi, and sensing traffic stays off your clinical and corporate networks.

Signed firmware

Firmware images are cryptographically signed with a Rekall-controlled key. The hub verifies every image before it is pushed, and nodes refuse anything unsigned or modified.

Encrypted in transit and at rest

Data travels to the cloud over encrypted connections and is stored on Google Cloud, which encrypts data at rest by default.

Tenant isolation

Each customer organization is kept separate. Access rules are enforced in the cloud so staff can only see the organization and facilities they belong to.

Controlled access

No self-serve sign-up. Organizations are created by Rekall, and staff join only by invitation. Single sign-on is on the roadmap.

Supervised and resilient

Every node and hub is supervised and faults are reported to staff. Detection and local alerting keep running on site if the internet connection drops.

Compliance

Where we stand, stated plainly.

We would rather tell you exactly where we are than overstate it. This is our current position.

Information security management

Rekall operates an information security management system with policies and procedures designed in line with ISO 27001.

In place

Cloud infrastructure

VAKT runs on Google Cloud, whose infrastructure is independently certified to ISO 27001 and audited under SOC 2.

Certified provider

SOC 2

We are working toward a SOC 2 report for VAKT with an independent audit firm.

In progress

HIPAA

VAKT is designed to minimize health information: no video or audio, no names required, and raw data kept on site. We will work through your HIPAA requirements with your privacy and compliance team.

Discuss with us

Regulatory classification

VAKT is a wellness and activity monitoring system. It is not a medical device and does not replace clinical judgment.

Wellness device

For IT and security teams

Bring us your security questionnaire.

We expect your IT, security and compliance teams to review VAKT before it goes into a building. We can provide technical and security documentation and walk your team through the architecture.

  • Architecture and data-flow documentation
  • Security questionnaire responses
  • Network requirements for each connection option
  • Firmware update and signing process
  • Incident response and support contacts