Trust Center

Built to pass your
security review.

No agents, no inbound ports, and read-only access unless you turn on automated fixes and remote control. Here is what Apollo can see, where your data lives and how it’s protected.

SOC 2
Audit being arranged
We'll post the audit window here once fieldwork is booked.
Security program
Evidence on request
Request the security pack for the current control scope, implementation evidence and audit status.
Data residency
Confirm your region
EU, UAE and US regions are planned, not generally available. Confirm the available telemetry region with us before onboarding.
Access
OAuth, admin-approved
Read-only on Photon. Revocable from your admin portal at any time.

Your data

What we store, and where.

Apollo stores device telemetry — health, status and configuration — encrypted at rest in Microsoft Azure. Apollo uses Microsoft Azure. EU, UAE and US telemetry regions are planned, not generally available; confirm the available region and your residency requirements with us before onboarding. It does not record or read your meetings. OAuth tokens are encrypted and you can revoke them from your admin portal at any time.

Apollo uses Microsoft Azure. EU, UAE and US telemetry regions are planned, not generally available; confirm the available region and your residency requirements with us before onboarding.

What Apollo never accesses

  • ✕Your meetings — audio, video, chat, recordings or transcripts
  • ✕Who attends a meeting, or what anyone does
  • ✕Your network — there is nothing on it to access
  • ✕Passwords — we never ask for or store them

OAuth only. No agents.

Apollo connects cloud-to-cloud through each platform's own admin APIs. Nothing is installed on your network or your devices, and no inbound firewall rules are needed.

  • ✓OAuth 2.0 and vendor API keys only
  • ✓No agents or software deployed
  • ✓No inbound network access
  • ✓Revocable at any time from your admin portal

Encrypted in transit and at rest.

Traffic between Apollo and platform APIs uses TLS 1.2 or later. Device health records, incident history and configuration baselines are encrypted at rest with AES-256.

  • ✓TLS 1.2+ for all API traffic
  • ✓AES-256 encryption at rest
  • ✓OAuth tokens encrypted at rest
  • ✓No passwords stored

Only what the job needs.

Apollo collects device health, status and configuration. It sees whether a room is in a call — never who is in it or what is said.

  • ✓Device telemetry only
  • ✓No meeting content: audio, video, chat or transcripts
  • ✓No user behavior tracking
  • ✓Data minimization by design

Access you control.

Role-based access decides who can view, configure and manage each fleet. Partners managing several customers see each tenant separately.

  • ✓Role-based fleet permissions
  • ✓Tenant-scoped access
  • ✓Emily action history
  • ✓Audit logging for admin actions

Spacera is a Microsoft ISV Partner, a Zoom ISV Partner and a Cisco Collaboration Select partner.

Doing a vendor security review?

We’ll send policies and architecture documents, complete your questionnaire, or walk your InfoSec team through Apollo live. Detailed permission and architecture documents are shared under NDA.

security@spacera.io