Der Warenkorb ist leer

Compliance Statement

ITVDesk Compliance Statement

May 2026

At ITVDesk, we are committed to maintaining high standards of software security, privacy, transparency, and interoperability. As a developer of professional streaming software for VMS/NVR environments, we recognize the importance of secure development, trusted distribution, responsible vulnerability handling, and compliance with applicable EU and international requirements.

This statement summarizes the current ITVDesk compliance approach and is intended for customers, partners, integrators, and security teams evaluating ITVDesk for professional deployments.


General Data Protection Regulation (GDPR)

ITVDesk is developed and operated in the European Union and follows GDPR principles, including data minimization, purpose limitation, security by design, and privacy by default.

The ITVDesk application does not collect video content, camera feeds, screen recordings, locations, or user activity telemetry. For online license activation, ITVDesk may process only the minimum technical information required for license validation, such as hostname, random hardware identifier (HWID). Offline activation is available for customers who prefer not to use online activation.

Billing and invoice data are processed only for order fulfillment, accounting, tax, and legal obligations. Customers may request access, correction, or deletion of personal data where legally applicable.


EU Cyber Resilience Act (CRA) Readiness

ITVDesk is designed with consideration of Regulation (EU) 2024/2847 – Cyber Resilience Act principles for products with digital elements.

Our security readiness process includes:

  • Secure software development practices
  • Vulnerability disclosure and reporting process
  • Security changelog and patch communication
  • Secure update package verification
  • Software integrity and tamper detection
  • Digitally signed official releases
  • Software Bill of Materials (SBOM) preparation where applicable

ITVDesk continues to improve its documentation, update process, and vulnerability handling procedures in preparation for applicable CRA obligations.


NDAA Section 889 Statement

ITVDesk is a software-only solution developed in the European Union. ITVDesk does not include physical video surveillance hardware, telecommunications equipment, or embedded hardware components.

To the best of our knowledge, ITVDesk does not contain or integrate software or hardware components from manufacturers restricted under NDAA Section 889, including covered telecommunications or video surveillance equipment manufacturers.

ITVDesk is designed to run on standard customer-provided Windows, macOS, or Linux systems and does not require dedicated capture appliances, hardware encoders, or proprietary surveillance hardware from restricted manufacturers.

Customers are responsible for ensuring that their complete deployment environment, including computers, cameras, capture devices, network infrastructure, and VMS/NVR systems, meets their own NDAA or procurement requirements.


ONVIF Compatibility

ITVDesk is designed to operate as a virtual ONVIF IP camera source for professional VMS and NVR systems.

ITVDesk supports ONVIF-based workflows and profile-related functionality, including:

  • Profile S – live video streaming and core IP camera integration
  • Profile T – modern video streaming workflows including H.264/H.265-related media handling where applicable
  • Profile G – recording and storage-related workflow support where applicable
  • Profile M – metadata and analytics-oriented workflow support where applicable

Unless explicitly listed in the official ONVIF Conformant Products database for a specific version and profile, ITVDesk should be understood as an ONVIF-compatible software solution rather than a formally ONVIF-certified product.


Secure Streaming and Communication

ITVDesk supports secure communication options for professional deployments, including:

  • HTTPS for secure web and ONVIF communication
  • RTSPS for secure RTSP signaling over TLS
  • SRTP for encrypted media streams where supported by the deployment
  • Certificate-based trust configuration
  • Secure authentication mechanisms

These capabilities help protect video streams, credentials, and control communication in enterprise, industrial, financial, retail, casino, and compliance-sensitive environments.


Software Integrity and Trusted Distribution

All official ITVDesk releases are distributed through official ITVDesk channels and served over HTTPS.

ITVDesk software integrity controls include:

  • Digitally signed installers and application binaries
  • Verified publisher identity
  • Integrity verification of official packages
  • Tamper detection for modified binaries
  • Secure update package validation
  • Trusted signer verification before installation where applicable

Modified, repacked or unofficial versions are not supported and may contain malware or bypass important security protections.


ISO/IEC 27001 and ISO/IEC 27701 Alignment

ITVDesk internal development and operational procedures are aligned with the principles of:

  • ISO/IEC 27001 – information security management
  • ISO/IEC 27701 – privacy information management

Formal certification is not currently claimed unless explicitly provided in an official certificate. ITVDesk continues to improve internal security and privacy processes in line with recognized standards.


CE, FCC, and RoHS

ITVDesk is a software-only product and does not include physical hardware components. Therefore, CE, FCC, and RoHS marking requirements are generally not directly applicable to ITVDesk as standalone software.

When ITVDesk is used with customer-provided hardware, such as PCs, servers, capture cards, webcams, or network devices, customers should ensure that the hardware used in the deployment meets applicable safety, electromagnetic compatibility, environmental, and procurement requirements.


Technology Partnerships and Industry Alignment

ITVDesk is designed to integrate with professional VMS and NVR ecosystems using ONVIF and RTSP-based workflows.

ITVDesk is used for integration scenarios involving platforms and environments such as:

  • Milestone XProtect
  • Nx Witness / Network Optix
  • Salient CompleteView
  • Hikvision NVR / HikCentral environments via ONVIF workflows
  • Dahua VMS/NVR environments via ONVIF workflows
  • Other ONVIF-compatible VMS and NVR systems

Technology partner or marketplace status may vary by vendor and region. Official compatibility, partner listings, or certification references should be verified from the relevant vendor page where applicable.


Security Contact

For compliance, security, vulnerability disclosure, or software authenticity inquiries, please contact:

Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!

For general product and licensing support, please contact:

Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!


Important Notice

This compliance statement reflects the current ITVDesk security and compliance approach. It is provided for informational purposes and does not replace a formal legal, regulatory, procurement, or cybersecurity assessment by the customer.

ITVDesk is continuously improving its security, compliance documentation, and integration readiness for professional and enterprise environments.