Security & Data Flow
Last updated: June 2026
Yamazo Studio is a 100% on-premise desktop application. This page summarizes how data flows, for enterprise IT and information-security review. For the full data-protection notice see our Privacy page; the contract and Data Processing Agreement (DPA) are provided on request.
All working data — videos, time studies, tasks, operator and production data — is kept in a local database on your machine. There is no central server or cloud dependency; the app runs without internet. In multi-seat installs, data is shared over the local network (LAN) with AES-256 encryption — never over the internet.
Working data, video and operator data never leave the device under any circumstances. The only outbound traffic is license/version information and (if enabled) error diagnostics that contain no working data.
| Data | Leaves the network? | Destination |
|---|---|---|
| Video, study, task, operator, production data | No — never | Local disk only |
| License activation | Yes (once) | License server — offline alternative available |
| License validation (ongoing) | No | Local signature (offline) |
| License/version info | Yes (periodic) | Domain, machine id, version, OS |
| Error diagnostics (optional) | On by default, can be disabled | Error message/stack — NO working data |
| Update version check | Off by default | — |
For installs with no internet access there is an air-gap mode: online license validation and error diagnostics are fully disabled, and the license is activated with an offline activation code. The app runs fully functional without ever touching the internet.
Purpose: when the app hits an error, the support team can see and fix it quickly. Contents: error message, error stack, machine id and organization domain. It contains no video, study, task or operator data. It can be turned off with one click in Settings; it is automatically off in air-gap mode.
Operator video is personal data, and because it never leaves the device, control stays entirely with you; in this setup the customer is the data controller. For the detailed data-protection notice see our Privacy page.
Single-machine install; no separate server or database to set up. No admin-server dependency; each seat runs on its own local database. Updates are controlled. For technical security questions: support@yamazovas.com
The Windows installer is not yet code-signed. On first run Windows SmartScreen will show "Windows protected your PC — unrecognised app"; choose More info → Run anyway. Some managed environments (AppLocker, WDAC, EDR) block unsigned binaries outright — in that case your IT team can allow the file by hash after verifying it below. A code-signing certificate is on our roadmap; until then this page is how we let you check the file instead of asking you to trust it. Every release publishes its SHA-512 hash. Compare the value under `sha512:` at https://yamazo-dist.stratanaut.com/latest.yml with the file you downloaded: Windows (PowerShell): $f=[IO.File]::OpenRead("$HOME\Downloads\Yamazo Studio Setup 2.2.3.exe"); [Convert]::ToBase64String([Security.Cryptography.SHA512]::Create().ComputeHash($f)); $f.Close() macOS / Linux: openssl dgst -sha512 -binary "Yamazo Studio Setup 2.2.3.exe" | base64 The two strings must match exactly. If they do not, do not run the file — write to support@yamazovas.com and we will investigate. The macOS build is signed and notarised by Apple, so it installs without a warning.