Product

Security teams still catch what matters. Nobody scrubs through the rest.

LockedStream is middleware for your existing video-security system. It seals footage at capture and only ever hands a decryption key to the right person, for the right clip, at the right moment.

Authoring a LockedStream policy in plain English on a phone.
Plain-English policy

Describe the rule. Ship the policy.

You write access rules the way you'd say them out loud. An LLM translates your intent into deterministic, enforceable policy code — which you review and test before it goes live.

LockedStream Policy Studio
You write
“Only release footage when a fall is detected in the living room. Give access to Mom's two daughters and her on-call nurse — nobody else. If it's between midnight and 6am, also alert the night caregiver.”
# compiled policy — reviewable & testable on event.type == "fall" and zone == "living_room": release(clip, to=["daughter:sarah", "daughter:emily", "nurse:on_call"]) if time in "00:00".."06:00": notify("caregiver:night") default: deny_all() # sealed by default
The pipeline

Sealed at capture. Opened only on an event.

1

Encrypt at capture

Every clip is encrypted the instant it's recorded, with a key that rotates every 5 seconds. Sealed at rest and in transit.

2

Keys stay locked

Decryption keys are withheld by default. Admins, cloud providers, and anyone who copies a disk get encrypted noise.

3

AI opens the door

A key is released only when the AI detects a qualifying event — or your policy criteria are met — and only for the relevant clips.

4

Only the right people

Keys go to the specific roles your policy authorizes. Every release is logged to a signed, court-ready audit trail.

Capabilities

Building blocks for data protection

Event-gated access

Footage stays sealed until an AI-detected event — a fall, fire, theft, or vandalism — or an explicit policy match unlocks exactly the relevant clips.

Rotating-key encryption

Keys rotate every 5 seconds, so a leaked drive or intercepted stream yields nothing but noise.

Court-ready audit trail

Every key release is signed and logged with chain-of-custody exports — evidence that holds up when it matters.

Role-based release

Caregivers, facilities managers, and police each see only what their role authorizes — no blanket admin access.

Drops into what you own

Middleware for existing systems — Frigate and Home Assistant on the open-source edition, enterprise NVRs on Pro.

Test before you deploy

Run what-if scenarios against a policy to confirm exactly who would gain access — before it's ever live.

Where it fits

Built for the footage that's most sensitive

Schools & campuses

Protect student footage under FERPA — released only to the right staff on a real incident.

Warehouses & retail

Catch theft and safety events while keeping staff's ordinary workday off-limits to casual review.

Eldercare & homes

Fall detection that alerts family and nurses — without leaving hours of private life scrubbable by an admin.

Hospitals & care

HIPAA-aligned control over who can view patient-area footage, with a signed record of every access.

Editions & pricing

Free for the community. Pro for scale.

The same core protection, packaged for home tinkerers and for organizations running thousands of cameras.

LockedStream Free

Open source, free for non-commercial use

Free forever · for personal & non-commercial use
  • Fully open source, community-maintained
  • Drops into Frigate and Home Assistant
  • Rotating-key encryption + event-gated key release
  • Plain-English policy authoring for everyday setups
Get notified at launch
LockedStream Pro

Data protection for vendors and integrators

Commercial licensing · contact sales
  • For facilities, campuses, and vendors at scale
  • Role-based policy engine with a signed, court-ready audit trail
  • Hardware-backed DRM, SSO/OIDC, chain-of-custody exports
  • Deploys on-prem or cloud — private by default
Request a demo

See it on your cameras.

Bring LockedStream to the video-security system you already run.