Security at atheo
Built from the ground up with privacy and security as core principles
Edge Computing
All AI processing happens locally at each gym. Video never leaves the premises.
256-bit AES Encryption
Military-grade encryption for all data transmission and storage.
Anonymous Processing
Only skeletal keypoints are analysed. No facial or identifying features.
Zero Data Retention
Video streams are processed in real-time and immediately discarded.
Our Security Architecture
1. Visual Input to Edge Processing
The gym's motion capture infrastructure feeds directly into our on-premise edge computing devices. These devices run our proprietary AI models locally, ensuring visual data never travels over the internet.
2. Real-time Processing & Deletion
Our AI processes video streams in real-time to detect equipment, exercises, and extract skeletal keypoints. Video frames are immediately discarded after processing - nothing is recorded or stored. No facial recognition is performed, ensuring complete anonymity.
3. Encrypted Data Transmission
Only workout summaries (exercise, reps, estimated weight) are transmitted to our servers using TLS 1.3 encryption. This data contains no biometric or visual information.
4. Secure Cloud Storage
Your workout history is stored with 256-bit AES encryption at rest. Access is strictly controlled through authentication and authorisation protocols.
Compliance & Certifications
Our architecture is designed with privacy regulations in mind. Full compliance documentation and certifications will be completed as we approach launch.
GDPR
Privacy-First Design
CCPA
Privacy-First Design
SOC 2
Post-Launch Goal
ISO 27001
Future Roadmap
Security Reporting
Found a security vulnerability? We appreciate responsible disclosure to help keep our users safe.
security@atheo.ai