Security
FyreSign offers secure, cloud-based digital signage with encrypted data, remote management, and fleet control. Built for scalability, privacy, and full control.
Security and Privacy in FyreSign: Built for Safe and Scalable Digital Signage
FyreSign is designed from the ground up with security and privacy as key components. As a cloud-native platform, it runs in a secure Kubernetes environment hosted in the EU, ensuring that all EU/EEA data remains within the region. This commitment to data localization is part of FyreSign’s core privacy strategy.
Data Encryption – At Rest and In Transit
All data stored within FyreSign, including databases and message queues, is encrypted by Google Cloud. Only authorized Google Cloud nodes can decrypt this information. Uploaded content such as images and videos is also stored in encrypted buckets and assigned unique 128-bit IDs. These files can only be accessed using exact, secure URLs.
When it comes to data in transit, FyreSign uses modern encryption standards. Communication between systems uses TLS-encrypted gRPC and HTTP protocols. Internally, services within the Kubernetes cluster communicate using mutual TLS (mTLS), signed by FyreSign’s own root certificate. This ensures a secure flow of information across the entire platform.
Secure Authentication and Access Control
User authentication is handled through OAuth 2.0 with PKCE, offering secure, token-based access. Access tokens are time-limited to one hour for added protection. Passwords are hashed using bcrypt, making them nearly impossible to reverse-engineer. Every API endpoint is protected with strict access control, blocking unauthorized attempts to retrieve data or control devices.
Protected Content Playback and Device Lockdown
The playback experience is just as secure. Players are essentially web clients locked to display only the authorized content. For Chrome OS devices, a custom Chrome app handles device authentication and ensures the player only connects to approved services. Display configurations and content updates are securely delivered via the SocialScreen API.
Admin Interface with Secure Login
All user administration is handled through a secure web portal. Logging in is protected by OAuth 2.0 PKCE and operates via a dedicated authentication service. The admin panel lets users manage content, devices, and user roles without compromising system integrity.
FyreSign combines flexibility with top-level security, so businesses can scale their signage without sacrificing control or compliance.