Security
Your telemetry describes your systems. We protect it like it matters.
Security is designed into every layer of Televane — from the agent on your servers to the database that stores your data.
On your servers
The Televane agent is built to be safe to run on production machines.
- Outbound only. It opens no listening ports and connects only to Televane over HTTPS (TLS 1.2+), verifying certificates and never following redirects.
- Single-use enrollment. Install tokens expire after 15 minutes and work once; the agent then holds its own credential, encrypted by the operating system.
- Secrets never leave. Passwords, tokens, keys and card numbers in logs are masked on your server before anything is sent.
- Minimal data. No command lines, environment variables or file contents.
previewshows exactly what would be sent. - Bounded resources. Limits on CPU, memory and disk buffer.
Agent — what is sent
sentCPU, memory, disk, network
sentTop processes (names only)
sentLogs you choose, after redaction
neverCommand lines and environments
neverFile contents and credentials
In our platform
Encryption everywhereTLS 1.2 or later for every connection, including between our servers and the database (certificate-verified). Encrypted disks and encrypted, versioned backups.
Tenant isolationEvery organization's data is separated in the database by row-level security, enforced for the application itself — not only in application code.
Hardened networkServers accept web traffic only through our protected network edge. The database has no internet address at all.
Backups and recoveryContinuous, encrypted database backups with point-in-time recovery, daily disk snapshots, and regular automated backup checks.
Secure developmentCode review, automated tests, security scanning and dependency vulnerability checks on every change; immutable, versioned release images.
Data in IndiaHosted on Amazon Web Services in Mumbai. We never sell your data and never use it to train AI models.
For your team
Control who can see and change what.
- Roles from viewer to owner, per organization.
- Two-step verification with any authenticator app, and recovery codes.
- Single sign-on (OIDC) and SCIM user provisioning.
- High-Security Mode and invitation approval for stricter teams.
- Audit log of every administrative action.
- Scoped API tokens for automation and ingest.
Report a vulnerability
If you believe you have found a security issue in Televane, email security@televane.com with the details and steps to reproduce. Please give us reasonable time to fix it before disclosing it, and do not access other customers' data or disrupt the service while testing.