Security & privacy

Privacy-first by design.

ProcureMate is built for places where trust matters most. We tell you the rules, and we follow them.

Storage & supply rooms only

Cameras live in inventory areas only — never customer-facing, sleeping, or PHI-sensitive spaces. Setup guides and signage included.

No facial recognition. Ever.

We don't identify people. The AI looks at items on shelves, not faces, badges, or names.

No raw video stored

Only motion-triggered snapshots. Auto-deleted after 30 days. Nothing else hits durable storage.

Encryption everywhere

Camera credentials encrypted at rest with AES-256-GCM. All streams encrypted in transit. Keys rotated automatically.

Strict tenant isolation

Postgres row-level security enforced on every query. Your organization's data never touches another's.

One-click controls

Pause monitoring with one click. Full account deletion within 24 hours of request. Audit log of every event.

Vertical-specific notes

Different rooms, different rules.

Pharmacies & clinics

Cameras must not be placed where PHI is visible. Setup guides keep the lens away from prep counters and labels.

Shelters & food banks

Supply room only — never sleeping, bathroom, or recipient pickup areas. Signage template provided per vertical.

Grocery & restaurants

Post the included signage in monitored areas. Templates differ by vertical and ship during onboarding.

Universal rules

The exact rules we hold ourselves to.

  1. Cameras live in storage / supply areas only — never in customer-facing or private areas.

  2. No facial recognition. Ever.

  3. No raw video stored. Only snapshots when motion happens, deleted after 30 days.

  4. Camera credentials encrypted at rest with AES-256-GCM.

  5. All streams encrypted in transit.

  6. Strict tenant isolation enforced by Postgres row-level security.

  7. Pause monitoring with one click.

  8. Full account deletion within 24 hours of request.

  9. Audit log of every event, queryable by you.