Two-person publishing
Switch it on and every new upload and playlist change needs approval from a second person with the Approver role. You cannot approve your own work, and any edit after approval needs approval again.
Home / Security
Security
Security you can explain to your client
Screens in public places are a broadcast. SignaOrbit is built so that a stolen password, a bad upload or a swapped file cannot quietly put the wrong thing on your screens.
Content safety
If a login is stolen, bad content still cannot go live
Five safeguards sit between an account and your screens.
Upload safety scan
Uploaded images and sampled video frames can be checked by an image-safety service. Flagged files are held back, hidden from normal users and released only by an admin. If the check cannot run, the file stays held.
Verified on the TV
The playlist carries a SHA-256 fingerprint for every file. Each screen checks what it downloaded and refuses a file that does not match, including one replaced under the same name.
Alerts and rollback
The account owner gets an email whenever a playlist is published (on by default, and you can turn it off). Each playlist keeps its last 10 published versions for one-click revert.
Freeze publishing
One button blocks every publish and emergency alert and signs everyone out. Screens keep playing what they have. Lifting the freeze needs the admin's password.
Offline-safe screens
Screens play from stored copies, so what is on a screen changes only through the checks above, not through a live stream.
Accounts and data
Protection for your team and your information
Encryption, access control and isolation are part of the platform, not an add-on.
Encrypted twice
HTTPS, plus a second layer where every browser session and every screen negotiates its own key and each message is sealed with AES-256-GCM. The server signs the key exchange, and replayed messages are rejected.
Roles and permissions
Built-in and custom roles. Every action is checked on the server, and only an admin can change approval, alert and freeze settings.
Customers kept apart
Each organization's data is separated inside the platform, and automated tests fail if a data type is added without that protection.
Hardened sign-in
Passwords are stored only as salted hashes. Repeated failed sign-ins are limited, and an admin can sign out every user at once.
Signed, expiring media links
Files are delivered through links that expire after an hour, so media is not publicly browsable.
Audit trail
Sign-ins, publishing, approvals, security changes, freezes and reverts are recorded with who, what and when.
Your part
Security works best when you switch it on
Two-person approval and the content scan are settings, not defaults.
Turn on approval
Give a second trusted person the Approver role, then switch on two-person publishing in your Security settings.
Watch the publish emails
Send them to a mailbox somebody reads. An unexpected publish is the earliest warning you will get.
Least access
One login per person, the smallest role that does the job, and deactivate people who leave.
FAQ
Common questions
What if someone steals a login?
With two-person publishing switched on, a single stolen login cannot put content on your screens: new uploads and playlist changes need a second person with the Approver role to approve them first. Publish emails tell you within minutes, and one button freezes publishing and signs everyone out.
Can an unsafe image or video reach a screen?
Uploads can be checked by an automated image-safety service. Anything it flags is held back, hidden from normal users and kept off screens until an admin reviews it. Each TV also checks every file against its published fingerprint, so a swapped file is refused.
How do I undo a bad publish?
Each playlist keeps its last 10 published versions. Open the playlist history and put an earlier version back with one click. Screens switch to it within about a minute.
Is our data separated from other customers?
Yes. Every query is limited to your organization inside the platform, and automated tests check that no data type is added without this protection.
Do you have security certifications?
We do not currently hold a third-party certification such as ISO 27001 or SOC 2. This page describes the protections built into the product. Contact us if your procurement team needs a security questionnaire answered.
Read our Privacy Policy and Terms of Service.
Keep reading
Related
Put your first screen in orbit today
Thirty days free, five screens, no credit card. Most teams have content playing on their first TV within the hour.