↓Skip to main content

Privacy and security

Protected on the camera.

AnchorCam Stereo's Rockchip RV1106G3 chip has a neural processor and a hardware cipher engine. So faces are blurred and recordings are signed on the camera, before anything reaches a computer, and recordings can be encrypted.

These features arrive through software updates.

Face redaction

Faces blurred before they are saved.

The camera's neural processor finds faces and blurs them before the frame is written. Raw faces never leave the device, which helps teams that record in public or at work sites meet GDPR, BIPA and CCPA.

Left: the raw frame. Right: blurred on the camera. Recorded on an earlier prototype with the same RV1106 chip.

Encryption

A lost card shows nothing.

Recordings are encrypted on the camera in real time with AES-128-GCM. We measured it on our own board: encrypting at the full recording data rate while both 1080p cameras, the IMU and the mics were recording, not a single frame was dropped. The key stays in the camera, so an encrypted card pulled out without it shows nothing.

Measured

AES-128-GCM at up to 10 MB/s while recording, about 3.7× the 2.7 MB/s a recording needs. 0 dropped frames.

Encryption

AES-128, AES-192, AES-256 (GCM, XTS, CBC, CTR modes)

Integrity

SHA-256, HMAC

Public key

RSA and ECC math, up to 4096 bits

Keys

Secure one-time-programmable memory, hardware random number generator

Isolation

ARM TrustZone secure area

Measured on an AnchorCam Stereo board, 3 November 2026. Other rows: Rockchip RV1106 datasheet, Secure System section.

Signed capture

Proof it is the original.

Each group of frames is hashed and signed with a key that never leaves the camera. The signatures travel with the recording, so anyone can check later that it has not been edited. Codename Anchor, our earlier camera, already signs this way with Ed25519 inside the same RV1106's TrustZone.

Order now. Get it as an update.