Security & Data Flow
Last updated: June 2026
Yamazo Studio is a 100% on-premise desktop application. This page summarizes how data flows, for enterprise IT and information-security review. For the full data-protection notice see our Privacy page; the contract and Data Processing Agreement (DPA) are provided on request.
All working data — videos, time studies, tasks, operator and production data — is kept in a local database on your machine. There is no central server or cloud dependency; the app runs without internet. In multi-seat installs, data is shared over the local network (LAN) with AES-256 encryption — never over the internet.
Working data, video and operator data never leave the device under any circumstances. The only outbound traffic is license/version information and (if enabled) error diagnostics that contain no working data.
| Data | Leaves the network? | Destination |
|---|---|---|
| Video, study, task, operator, production data | No — never | Local disk only |
| License activation | Yes (once) | License server — offline alternative available |
| License validation (ongoing) | No | Local signature (offline) |
| License/version info | Yes (periodic) | Domain, machine id, version, OS |
| Error diagnostics (optional) | On by default, can be disabled | Error message/stack — NO working data |
| Update version check | Off by default | — |
For installs with no internet access there is an air-gap mode: online license validation and error diagnostics are fully disabled, and the license is activated with an offline activation code. The app runs fully functional without ever touching the internet.
Purpose: when the app hits an error, the support team can see and fix it quickly. Contents: error message, error stack, machine id and organization domain. It contains no video, study, task or operator data. It can be turned off with one click in Settings; it is automatically off in air-gap mode.
Operator video is personal data, and because it never leaves the device, control stays entirely with you; in this setup the customer is the data controller. For the detailed data-protection notice see our Privacy page.
Single-machine install; no separate server or database to set up. No admin-server dependency; each seat runs on its own local database. Updates are controlled. For technical security questions: support@yamazovas.com