Declare purpose
Version the notice and separate service-required processing from optional, withdrawable choices.
Privacy is an operating system, not a badge.
Stream is designed to support DPDP compliance programmes and privacy-aware video operations. It does not provide automatic or certified compliance.
Data lifecycle
Purpose before collection. Evidence after action.
Minimise collection
Keep full IP addresses, precise history, and optional device signals off unless a documented purpose needs them.
Constrain retention
Record content and audit retention intent, then verify enforcement across storage, search, logs, caches, and backups.
Handle rights
Verify the requester, scope tenant data, review exceptions, and record export or erasure evidence.
Shared responsibility
Product control and deployment duty stay distinct.
AreaStream providesOperator must complete
Tenant boundariesImplemented application checksConfigure identity, memberships, service credentials, and infrastructure isolation
RetentionValidated workspace policy intentEnforce schedules across every processor, replica, cache, log, and backup
ResidencyRegion intentSelect and verify storage, processing, support, telemetry, and disaster-recovery locations
Export and erasureReviewable workflow planConnect execution adapters, approve requests, handle exceptions, and retain evidence
AuditSearchable workspace mutation metadataSet access, retention, integrity, monitoring, export, and SIEM policy
Private hostingDeployment model and adapter boundaryPackage, harden, operate, patch, back up, monitor, and validate the environment
Data rights
Export and erasure require identity, scope, review, and evidence.
The admin planner models these steps without silently exporting or deleting data. Actual execution must be connected to tenant-scoped stores and authorised operational review.