Access Control & Identity
Who can get in, what they can see, and how VIDIZMO keeps its own staff out of your data by default.
What It Is
Access control and identity management cover how a system verifies who a user is and limits what they can do once they’re in. For a platform holding evidence, video, and sensitive records, this is usually the first thing a security reviewer checks.
How VIDIZMO Implements It
- Single Sign-On, Multi-Factor Authentication, and Role-Based Access Control, provisioned on a least-privilege, need-to-know basis
- Phish-resistant MFA through the customer’s own identity provider, including FIDO2/WebAuthn security keys and smartcards via Microsoft Entra ID
- SCIM provisioning for automated user onboarding and offboarding
- Zero Trust architecture, with geo-restriction and IP allow/deny lists at the tenant and per-content level
- Tenant isolation enforced at the application, database, and storage layers
- All activity logged and monitored for suspicious behavior, with audit trails retained for compliance
VIDIZMO Staff Access
VIDIZMO staff do not hold standing access to customer data. Access is granted only through a break-glass process: time-bound, requiring MFA, and fully logged for review.
