Onsito / Security and privacy

Security and privacy

Onsito measures machines and material flow from cameras, while the video stays with you. The product is in development and we are launching pilot deployments. That is why this page describes how Onsito is designed, and separately states what we are still verifying.

What Onsito is and what it is not

Onsito is camera analytics for operations. It detects when a machine is running, stopped or waiting for material, counts pieces and measures cycle times.

Onsito is not a security camera or a surveillance system. It does not watch people, property or entrances, and it does not evaluate employees. It does not interfere with machines or their control.

Design commitment or finished product

Everything described on this page is a design commitment. We build Onsito by these rules and verify them in pilot deployments. The last section of this page summarizes what is already verified and what is not yet.

Layer 1: the client's operations

Onsito is designed so that:

• cameras are mounted above workstations and the Onsito box processes the video directly on site,
• video stays in the client's network, the box keeps it for 90 days (the client sets the period) and it can be played back only from the client's network,
• the box blurs faces before it stores anything,
• the model is trained directly at the client's site, on the client's parts and machines, and images never leave the company,
• nothing is mounted on the machines and Onsito does not connect to their control systems or to PLCs.

Layer 2: the company boundary

Onsito is designed so that:

• the connection runs only outbound from the box, to the Onsito cloud,
• no port is opened in the client's network for Onsito and nobody can connect to the box from outside, not even us,
• the connection is encrypted,
• only events and numbers cross the boundary, never video or images.

Onsito has no remote access to the box. Data flows in one direction: from the box to the cloud. The box downloads updates itself over the same outbound connection and installs only an update with a valid signature. We do servicing and model training on site at the client.

Layer 3: cloud in the EU

Onsito is designed so that:

• only events and numbers go to the cloud: machine status, piece counts, cycle times and downtime,
• the cloud runs in the EU, with DigitalOcean in a data center in Frankfurt am Main,
• each client has its own separate cloud dashboard,
• the overview shows the shift by workstation, the ERP plan against actual output, and a morning report.

People in view

The camera points at the machine, but a person at the machine can end up in the frame. That is why Onsito is designed so that:

• the box blurs faces before it stores anything,
• Onsito does not evaluate anyone and summaries are only by machine and line,
• it does not use biometrics: it does not recognize anyone by face or by any other features,
• it does not recognize people's emotions.

Under Regulation (EU) 2024/1689 (AI Act), Onsito is an AI system. Head The Projects is its provider and the client is the deployer. Onsito is designed so that it does not fall among high-risk systems. It is not used to evaluate workers within the meaning of Annex III, point 4, and it does not use biometrics. We state the intended purpose in the contract and in the instructions for use. If the client started using Onsito to evaluate people, the client itself would become the provider of a high-risk system under Article 25 of the AI Act.

What the client must do with respect to employees (Section 316 of the Czech Labour Code, Act No. 262/2006 Coll.; informing employees; impact assessment) is described on the Privacy policy page.

Model training

The model is trained directly at the client's site, on the client's parts and machines. Training images never leave the company, neither to us nor to the cloud. We do not use one client's images to train a model for another client. When we train the model on site, we act as a processor under the contract with the client.

Hardware

The cameras and the Onsito box come from manufacturers outside China. We use cameras from Axis Communications (Sweden) or Hanwha Vision (South Korea). The Onsito box is an Apple Mac mini computer in an Onsito enclosure. The client receives the specific models in the offer and in the handover protocol.

Software, updates and vulnerabilities

• Updates are signed. Onsito is designed so that the box installs only an update with a valid signature.
• We build the software from components with vetted licenses.
• We release security updates for at least 5 years from when the given version is placed on the market.

Head The Projects will be the manufacturer of Onsito under Regulation (EU) 2024/2847 on cyber resilience (Cyber Resilience Act, CRA). We will report actively exploited vulnerabilities and severe incidents under Article 14 CRA through the ENISA single reporting platform: an early warning within 24 hours, a notification within 72 hours and a final report. We will inform affected clients about them.

How to report a vulnerability

Have you found a security flaw in Onsito or on the onsito.eu website? Send a message on LinkedIn linkedin.com/in/buriandan or to the data box (Czech government electronic mailbox) 3rt3arh.

• Describe where the flaw is and how to reproduce it.
• Tell us how we can contact you.
• Please do not publish the flaw until we have fixed it.

We will confirm receipt of the report within 3 business days and let you know how we will handle the flaw. The contact is also in the security.txt file.

What is done and what we are verifying in the pilot

Today the onsito.eu website is live. It is static, with no forms and no content from third-party servers. Microsoft Clarity measurement starts only with your consent, see Cookies.

The Onsito product is in development. In pilot deployments we are mainly verifying:

• how reliably the box blurs faces under different lighting, angles and distances,
• how accurately Onsito detects machine status and counts pieces,
• keeping video in the box for 90 days and playback only from the client's network,
• on-site model training on the client's parts and machines,
• integration into the client's network with an outbound-only connection.

As of October 12, 2026, a proof of concept is running in our workshop: status detection, piece counting and on-site model training on a demo line. Onsito is not yet running at any client. We are preparing the first pilot deployments.

Effective from October 12, 2026.