// Capability Brief
RGL-BRIEF · CV-01

GDPR-compliant Edge Computer Vision platform.

A production CV system that keeps cameras, compute, and decisions inside your perimeter. Built for regulated organisations that need detection value and data authority on the same day, with no compromise on either.

Scope
Platform design & delivery
Applies to
BEHOLDR
Posture
GDPR-first · Edge-native
Region
EU · EEA
// Why it matters

On-prem is not a deployment target. It is a control surface.

Public CV APIs make you choose: performance or control. Edge inference flips the trade. Retention, access, and lawful-basis decisions all stay yours to define and defend. No vendor flag-day can break a compliance posture you built yourself.

Pair that with RBAC wired into every operator surface, and on-prem gives you one clean answer to the two questions regulators actually ask: where does the data live, and who can act on it?

// Architecture Pillars

Four pillars of a compliant CV platform.

01 / Local Inference

Compute stays on your side

Frames are processed where they're shot. Raw imagery doesn't cross foreign cloud boundaries. Personal data never leaves the environment you control, by architecture, not by goodwill.

02 / Access Authority

RBAC as data authority

Role-based access is wired into every operator and admin surface. You decide who sees which streams, which stored frames, and which incidents. Enforced by identity, reviewable by audit.

03 / Retention Boundaries

Purpose-bound storage

Retention windows, purge workflows, and blur/redaction policies are first-class configuration. GDPR Article 5 principles ship as operational defaults, not retrofits before launch.

04 / Audit-ready Ops

Traceable by design

Model versions, operator actions, and access events are logged with correlation identifiers. Incident response and regulator conversations work off the same ground truth.

// What's Included

Scope of delivery.

A concrete set of platform capabilities and documentation, shipped as one coherent delivery rather than a box of components for you to integrate.

  • Deployment architecture aligned with GDPR Article 5 principles: lawful basis, minimisation, storage limitation, integrity, and accountability.
  • Role-based access controls integrated with your identity provider (OIDC / SAML), covering operators, reviewers, and administrators.
  • Retention and redaction policies wired into the platform with configurable purge windows and blur/anonymisation at the edge where appropriate.
  • Platform-native ingestion for common camera stacks: RTSP, ONVIF-compatible devices, and standard video formats on supported edge hardware.
  • Audit trail and runbooks for operator actions, model rollouts, and incident escalation paths, shipped alongside the platform.
  • BEHOLDR platform as the delivery vehicle, configured for on-prem, hybrid, or sovereign-cloud deployment according to your constraints.

Platform-native ingestion covers common camera protocols and standard edge hardware. Integrations with proprietary VMS systems, specialised sensor stacks, or bespoke data pipelines get scoped into the engagement rather than assumed up-front.

// Engagement

How we work.

We start by mapping camera topology, retention boundaries, and response workflows as one system. From there we produce a deployment blueprint that aligns platform architecture, compliance posture, and rollout. The goal: a system your security, risk, and platform teams can sign off on, and keep signed off as it scales.

Need a design review for your CV stack? Talk to our team, or explore BEHOLDR directly.