Trust & Safety Center
Built to protect people - not to identify them.
Watchful operates AI-powered autonomous guarding for thousands of cameras across the United States, New Zealand, and Australia. Privacy, security, and accountability is how our product is engineered. Every policy that governs how we handle your data lives here.
Compliance
SOC 2 Type II Compliant
Watchful is SOC 2 Type II compliant. Visit our Oneleet trust portal to view our compliance status and security controls. Our full audit report is available on request.
Compliance overview
trust.oneleet.com/watchful
- Framework
- SOC 2 Type II
- Trust Services Categories
- Security · Availability · Confidentiality
- Scope
- Watchful Platform, Quill AI, Monitoring Portal, supporting infrastructure
- Compliance partner
- Continuously monitored via Oneleet
- Audit reports & evidence
- Available on request
View our current compliance status and security controls in the Oneleet trust portal. Request the full audit report for the auditor's opinion, scope, and audit period.
Policies
Every commitment, written down.
We treat each policy as a separate document so you can read, cite, and link to exactly the part that matters for your procurement, security, or legal review.
Privacy Policy
How Watchful Systems and Watchful Limited collect, use, retain, and protect personal information across our Sites, Platform, and Services.
Read policy→Data Retention
How long we keep account data, video, audio, AI analytics, billing, and marketing data — plus our deletion and anonymization process.
Read policy→Facial Recognition
Our standalone, unconditional commitment: Watchful does not perform, store, or process facial recognition or any biometric identifier.
Read policy→Marketing & Communications
How we run email, sales outreach, and event marketing — opt-out, suppression, AI transparency, and global anti-spam compliance.
Read policy→Security
Security at a glance.
A short summary of the controls behind our SOC 2 attestation. For the full implementation detail, the Oneleet trust portal lists every control, owner, and most-recent evidence.
Encryption everywhere
TLS 1.2+ for data in transit and AES-256 for data at rest across all Watchful systems.
Least-privilege access
Role-based access controls and mandatory multi-factor authentication for every internal system.
Continuously tested
Regular vulnerability assessments, third-party penetration tests, and continuous monitoring of our SOC 2 controls.
SOC 2-compliant hosting
Production infrastructure runs in audited, ISO 27001 / SOC 2 data centres with isolated tenant boundaries per Subscriber.
Trained team
Every employee completes data-protection and security training, with role-specific training for engineering and operations.
Tested incident response
Documented incident-response runbook with breach-notification procedures aligned to GDPR, NZ Privacy Act 2020, and US state laws.
Our privacy promise to the public.
The privacy of every individual captured on a camera monitored by Watchful is the platform's first design constraint.
- We do not perform, store, or process facial recognition under any circumstances.
- We do not collect, derive, or retain biometric identifiers — including faceprints, voiceprints, gait, iris, or fingerprints.
- We do not build profiles of individuals seen on CCTV. No PII about passers-by is stored.
- It is architecturally impossible to track any person or vehicle across different Subscribers' camera networks.
- Live person/vehicle tracking is limited to a single active incident on a single Subscriber's own cameras.
- Video, audio, and analytics from one Subscriber are never shared with, or accessible to, another.
Contact
Talk to a human.
Security questionnaire, DPIA, vendor risk review, or a privacy request — these inboxes are monitored by the people responsible.
Security & incidents
Vulnerability reports, security questionnaires, SOC 2 evidence, incident notifications.
Privacy & data subject requests
Access, deletion, correction, opt-out, DPIA, and any data-protection question.
General
Anything else — sales, partnerships, media, or finding the right person.
Watchful Systems, LLC
Delaware LLC · United States
1300 Red River Street
Austin, TX 78701
United States
Watchful Limited
Limited Liability Company · New Zealand
57 Fort Street
Auckland 1010
New Zealand