Your floor plans. Your data.
EU by Default, GDPR Ready,
Zero-Knowledge Encrypted.
CCTV Design Tool is operated by TECHMAGIC UK LTD, a UK company, with project data stored in the EU by default. We are built on the principle that the sensitive project data you upload should remain under your control — not ours, not a data broker's, not anyone else's.
Short version: Your floor plans are stored in the EU by default — enterprise customers can request an alternative region — nobody at our company can read them without your password, and we never sell your data to anyone.
Zero-Knowledge Encryption — We Cannot Access Your CCTV Project Data
In Zero-Knowledge Mode, all encryption and decryption of your project data happens entirely in your browser using your private key. What reaches the cloud is already encrypted — ciphertext only, never your actual content.
For most installers
Standard encryption (always on) is sufficient for residential and commercial projects. It protects your data against external attacks and unauthorized access.
For high-security environments
Banks, government facilities, critical infrastructure — Zero-Knowledge Mode ensures even our admins and infrastructure team cannot access your project content.
Your Browser
You work on your floor plan and upload images. Your data and your encryption key exist only in your browser session.
Browser-Side Encryption
All data is encrypted in-browser using AES-256 with a key derived from your passphrase — before any network request is made.
EU Cloud Storage
EU cloud infrastructure receives and stores only encrypted blobs. Without your passphrase, nobody can read your floor plans, camera positions, images, or any project content.
You hold the key
Your encryption key is derived from your passphrase and never transmitted. A data breach on the infrastructure side exposes only encrypted data.
Floor plans & images included
Building blueprints, site photos, and floor plan images are encrypted just like project data — your site layouts never travel unprotected.
Even our admins can't read it
In Zero-Knowledge Mode, CCTV Design Tool employees, support staff, and infrastructure administrators have no access to your project content.
Zero-Knowledge Mode is included in all premium plans. Standard mode uses server-side encryption which protects against external attacks but does not prevent access by infrastructure administrators.
Our Data Privacy Commitments — No Selling, No AI Training, No Sharing
We do not have a business model that depends on monetising your project data. Here is our plain-language commitment.
We do not sell your data
Your floor plans, device lists, site layouts, and project metadata are never sold to third parties, data brokers, or marketing companies.
We do not use your data to train AI
Your project data is not used to train machine learning models, improve AI products, or feed any model training pipeline — ours or anyone else's.
We do not share your data with competitors
Your system designs, camera placements, and client project information are yours. No competitor or third party ever has access to it.
We do not use your data for advertising
We do not profile your project content for targeted advertising purposes. Our revenue comes from subscriptions, not from selling insights about your work.
What we do use your data for
Providing the service — storing and syncing your projects across devices.
Technical support — diagnosing bugs you report, always with your consent.
Aggregate analytics — anonymous usage statistics to improve UI and performance, never project content.
Common questions about data security & GDPR
Practical answers for installers and integrators. No legal jargon.
Where your data is stored has not changed. TechMagic, an international software engineering group, acquired CCTV Design Tool in August 2026, and nothing moved because of the acquisition: project data is still stored in the European Union by default, on Amazon Web Services regions eu-central-1 and eu-north-1. Your contracting entity and data processor is TECHMAGIC UK LTD, a United Kingdom company registered at 41 Devonshire Street, Ground Floor, London W1G 7AJ (VAT GB 409 6531 89). If you keep an Article 30 record of processing activities, updating the processor name is the only change on your side. The UK is covered by the European Commission's adequacy decision, and Standard Contractual Clauses apply to any access by TechMagic personnel outside the EEA. TechMagic's management systems are certified to ISO/IEC 27001:2022 (certificate no. 4159904) and ISO 9001:2015 (certificate no. 4159903), issued by Quay Audit UK Ltd.
Our current sub-processors are Amazon Web Services (hosting and storage, EU regions eu-central-1 and eu-north-1), Mailgun (transactional email, EU endpoint), Lemon Squeezy (payments, as Merchant of Record), Sentry (error monitoring, EU ingest with PII disabled), Google (OAuth sign-in and map imagery), and Mapbox / Esri ArcGIS (satellite and map imagery). A current list is available on request at any time, and we notify customers of material changes, consistent with GDPR Article 28(2). Contact us for the current list; if you hold an older version attached to your contract, we will send the current one with a change log.
CCTV Design Tool is GDPR ready. Project data is stored in the European Union by default; enterprise customers can request an alternative region. We offer Data Processing Agreements (DPAs) for enterprise customers and support all GDPR data subject rights — including access, rectification, and deletion.
For individual installers and small businesses, a separate DPA is not required for standard use. If your company requires a formal DPA — for example because you're processing personal data belonging to your clients — we provide DPA templates for enterprise customers. An enterprise DPA is also where an alternative hosting region is agreed, if your organisation needs one. Contact us to request one.
Your project data is stored on EU-based cloud infrastructure by default: Amazon Web Services (AWS) regions eu-central-1 and eu-north-1, with encrypted backups also stored in EU cloud storage. Enterprise customers can request an alternative region as part of their Data Processing Agreement; any transfer of data outside the European Union happens only under appropriate contractual safeguards. You can request a full export or permanent deletion of your data at any time.
You can export all your project data at any time before cancelling. After account deletion, your data is permanently removed from our servers — this is the same whichever region your data is stored in. Contact us if you need written confirmation of deletion.
Zero-Knowledge Mode encrypts your floor plans and project data in your browser before anything is uploaded. This means even our infrastructure team cannot read your project content. It's designed for high-security environments: banks, government facilities, and critical infrastructure. For most installers working on residential or commercial projects, standard encryption (which protects against external attackers) is fully sufficient. Zero-Knowledge Mode is included in all premium plans.
No. Your floor plans, device lists, site layouts, and project metadata are never sold to third parties, used for AI model training, or shared with competitors. Our business model is subscription-based — we have no financial incentive to monetise your data.
Your data is stored for as long as your account is active, in the European Union by default. You can request a full data export or deletion at any time, regardless of hosting region. We will process deletion requests and can provide written confirmation upon request.
Yes. CCTV Design Tool is ISO 27001 certified. If you need documentation for your own vendor security review, contact us and we will provide what your assessment requires.
Ownership & data residency — updated September 2026
CCTV Design Tool changed owner in August 2026. Here is exactly what that changed for your data, and what it did not.
Acquired by TechMagic in August 2026
TechMagic, an international software engineering group, acquired CCTV Design Tool in August 2026. The product keeps its own brand, roadmap and dedicated delivery team.
Operator and data processor: TECHMAGIC UK LTD
Your contracting entity and data processor is TECHMAGIC UK LTD, a United Kingdom company registered at 41 Devonshire Street, Ground Floor, London W1G 7AJ (VAT GB 409 6531 89). The UK is covered by the European Commission's adequacy decision.
Your data is still stored in the EU
Project data is stored in the EU by default, on Amazon Web Services regions eu-central-1 and eu-north-1, unless an enterprise customer agrees an alternative region in its Data Processing Agreement. Nothing moved because of the acquisition.
ISO/IEC 27001:2022 certified management systems
TechMagic's management systems are certified to ISO/IEC 27001:2022 (certificate no. 4159904), issued by Quay Audit UK Ltd.
GDPR Questions? Data Processing Agreements & Custom Policies Available
If you have specific security requirements — data processing agreements, custom retention policies, or need information for your own GDPR compliance — we'll give you straight answers. No sales call required.
Enterprise clients can request a Data Processing Agreement (DPA) and full security documentation.
Security practices last reviewed: September 2026 · Questions? Contact our Data Protection Officer at security contact form