Security & Compliance — Aeion Spatial
3D / XR / spatial computing introduces new security considerations: high-value 3D assets (CAD models worth millions), VR meeting privacy (sensitive corporate conversations), biometric data (hand tracking, eye gaze, body pose), spatial anchors (room scans of private spaces), real-time multiplayer state (cheating + integrity). Aeion ships institutional-grade controls — per-world access RBAC, asset watermarking + DRM for premium content, VR meeting privacy (E2E audio in private spatial zones), GDPR for biometric VR data, per-tenant scene isolation, plugin sandbox security.
3D Asset Protection
High-value 3D assets (CAD models, architectural plans, character designs, game art) need protection.
VR Meeting Privacy
```typescript
Biometric Data + GDPR
VR/AR captures unprecedented amounts of biometric data.
Per-Tenant + Per-World Isolation
```typescript
Plugin Sandbox Security
```typescript
Compliance Mapping
`
FAQ
Yes, like any business record. E2E-encrypted private zones aren't recorded by Aeion (we can't access content). Standard recordings stored encrypted; access requires legal process.
Limitation of any video system. Watermarks identify potential leakers; meeting recording controls disable by default; corporate clients add NDA + access logs.
AI generation providers (Meshy, Luma, etc.) have their own licensing terms; pass through to you. For commercial use, verify provider terms. Aeion doesn't claim ownership of AI-generated assets.
No sandbox is perfect. Bug bounty offers up to $10K for sandbox escapes; rapid response for confirmed issues. Plugins are sandboxed within the constraints of browser security model.
Determined attackers can capture rendered frames. DRM raises the barrier (most casual leakage); a custom enterprise arrangement adds forensic watermarking for traceability if leaked.
Default: not stored. Configurable per-tenant: real-time use + immediate discard, or short-term retention (e.g., 24h for session analytics), or extended (rare; requires explicit consent).
A custom enterprise arrangement supports BYOK via AWS KMS, GCP KMS, Azure Key Vault. Revocation = effective data destruction.
Available via a custom enterprise arrangement; air-gapped requires custom engagement. Used by defense contractors, classified projects.
Cascades to all biometric stores. Specifically: hand tracking data, eye gaze data, body pose data, spatial anchors, room scans — all wiped on erasure request.
Annual third-party pentest; XR-specific attack vectors (plugin escape, asset extraction, biometric leakage) tested. Summary available under NDA to customers on a custom enterprise arrangement.
$10M Tech E&O + $5M Cyber liability via reputable insurer. COI on request for customers on a custom enterprise arrangement.