Security and Compliance
Security without a separate security project. Valotalive runs in data centers in the EU, encrypts every connection, and signs your team in through the identity provider your IT already runs, with GDPR compliance built into how data is stored and deleted.
- Try with laptop
- No CC needed
- Cancel any time
How Valotalive Keeps Your Screens Safe
Keep Your Data in the EU
Valotalive runs in data centers in the European Union. Your content and account data stay inside the EU, so you get EU data residency without negotiating exceptions through procurement.
Sign In Through Your Identity Provider
Single sign-on over SAML 2.0, with Okta, Microsoft Entra ID, and Google. Your login policies, including multi-factor authentication, stay enforced by your identity provider. When IT deactivates an account there, Valotalive access ends with it.
Available as an add-on, activated by our team. Who can do what inside the product is covered on the user management and access control page.
Restrict Access by Network
Limit connections to embedded apps and virtual displays to your own IP ranges. This is an add-on, with allowed IPs managed by your super admin in My Company.
Firewall setup is documented and small: players need one outbound HTTPS port and a short, published domain whitelist, with no inbound openings in your network.
Encrypt Data in Motion
Every connection to Valotalive is encrypted with TLS 1.2. Data-source integrations follow the same rule: screens receive only short-lived, read-only access tokens, and refresh credentials never leave Valotalive’s servers.
A display never holds your Power BI password or a long-term key.
See Who Did What
Event logs in the admin dashboard track account activity: who changed which app, flow, or display, and when.
Activity tracking is included in every subscription, so answering “who changed this screen?” needs no log export.
Lock Down the Screens Themselves
Security ends at the screen, so Valotalive players run as locked-down kiosk apps. Chrome OS devices can ship pre-enrolled into Valotalive device management through Google Zero-Touch Enrollment and boot straight into signage: no desktop, no browser, nothing else on the floor to harden.
Windows players run the same way through kiosk mode.
Where Your Data Lives and Moves
1. On the Screen
Players run in kiosk mode and hold only short-lived display tokens, never your source credentials.
2. In Transit
Every connection is TLS-encrypted and outbound-only, over a single HTTPS port.
3. In the Cloud
Data is stored in the EU, and deleted content is purged automatically.
Certified and Compliant
CASA Tier II
Certified through an assessment by TAC Security, a CASA-authorized security lab. Read about the CASA certification.
GDPR
Deleted content is purged automatically, and full user and company data deletion is handled on request. See our privacy policy.
Payments
All payment processing is handled by Stripe, a certified PCI Level 1 Service Provider. Nobody at Valotalive can access card data.
Application development follows the OWASP Application Security Verification Standard (ASVS).
Frequently Asked Questions
Valotalive runs in data centers in the European Union. Content and account data stay inside the EU, and payment data never reaches Valotalive at all: it is processed by Stripe.
Yes. Valotalive is GDPR compliant: deleted content is purged from the database automatically, user deletion is automated, and full company data deletion is available on request. Details are in the privacy policy.
Yes. SAML 2.0 single sign-on with Okta, Microsoft Entra ID, and Google, supporting both service-provider and identity-provider initiated login. SSO is an add-on activated by the Valotalive team on request.
Through your identity provider. With single sign-on active, every Valotalive login follows your identity provider’s authentication policy, including multi-factor authentication, conditional access, and offboarding. There is no separate in-app 2FA to configure or audit.
Keep the players locked and the traffic outbound. Valotalive screens run as kiosk apps that only hold short-lived tokens, connect outbound over a single HTTPS port against a short documented whitelist, and can be restricted to approved IP ranges, so adding screens never means opening your network.
Valotalive maintains a consistent uptime record with continuous monitoring, and the team is alerted to interruptions immediately. Current and historical service status is public at https://valota.live/status/.
