Security

Transport encryption and server processing

WebRTC protects media on individual transport connections. This is different from end-to-end encryption between participants: LiveKit routers and enabled recording processing can process media server-side. According to the operator, hosting, LiveKit, TURN and storage run on Hetzner infrastructure in Germany. Use the publicly approved HTTPS address; certificates, access rights and the actual infrastructure configuration are operational responsibilities.

Meeting links and host access

Meeting codes and access tokens grant access according to their permissions. Share host links only with trusted, authorised people and do not publish them. Some access credentials are stored in the browser, so protect your device and browser profile. Before a saved meeting is deleted, existing host access is revoked where the server permits it; success and failure are shown beside the meeting. Previously issued tokens and existing connections may have additional limitations.

Recordings and shared content

Recordings process audio, video and, where applicable, shared screens on the configured infrastructure. A visible permission is not a promise that recordings remain only on your device. Inform participants and respect consent and permissions. Download only recordings you need and protect those copies yourself; server-side deletion does not remove files already downloaded.

Limited technical diagnostics

The Sentry integration limits event fields and filters access credentials, names and conversation content from intended diagnostic events. STRUCT Call does not use session replay. This does not guarantee complete anonymity. Optional diagnostics are off without your consent; you can allow or withdraw them in cookie settings.

Evidence and sensitive uses

No independent security audit or penetration test report for the STRUCT Call application is published here. A provider's assurance applies only to that provider's service. Before using the service for highly confidential, medical or other specially protected information, assess suitability, contractual arrangements and necessary safeguards.

Reporting security concerns

Report suspected vulnerabilities to contact@ki-praxis.app. Describe the affected area and reproducible steps using test data. Do not include other people's meeting content, access tokens or personal data. Reporting does not authorise unauthorised testing, access or disclosure of confidential data.

Contact

Telephone: +49 172 628 9359

contact@ki-praxis.app