The security and trust behind the system
Our systems serve municipalities, security bodies and commercial fleets - handling sensitive video and operational data. Here is how we protect it.
Certifications & standards
Click a standard to download the certificate itself. All documents are also available on request by email.
ISO 9001
Quality management
ISO 27001
Information security management
ISO 27701
Privacy information management
ISO 27017
Cloud security
ISO 27018
PII protection in the cloud
ISO 27032
Cybersecurity guidelines
GDPR
Aligned with the EU regulation's principles
Patent-protected technology
Registered intellectual property
Documents on request
The official documents procurement teams and CISOs ask for - available here for download after a quick approval.
Security questionnaire response
The official document: certifications, secure development, encryption, permissions, cloud and privacy - a consolidated answer to security questionnaires.
Operational transparency
Subprocessors
The marketing site and communications rely on: Vercel (site hosting), Google Analytics (measurement, post-consent only), SendGrid (email), monday.com (inquiry management). Product infrastructure (the operational dashboard) runs on leading cloud providers - Amazon Web Services and Google Cloud - or in an on-prem / private-server deployment for sensitive organizations, per the customer's requirement. The full product subprocessor list is provided with the data processing agreement (DPA).
Responsible vulnerability disclosure
Found a vulnerability? Write to office@mis.org.il and we will handle it quickly and discreetly. Contact details are also published per the security.txt standard (RFC 9116) at /.well-known/security.txt.
Availability & SLA
A 99.9% availability target with continuous monitoring and a public status page. Our SLA is severity-tiered - critical faults answered within hours, routine requests within business days - with full remote support and an on-site escalation commitment. In Israel the SLA covers hardware as well; in international deployments our SLA covers the software and any service-disabling fault, while hardware is handled by certified installers and local partners - under an SLA we monitor and hold to our own standards. Exact targets are defined in the customer agreement.
Helping you meet your compliance duties
Full documentation, controlled permissions, audit logs and structured reports - the tools the system provides so your organization meets its own obligations.
GDPR (European Union)
Privacy by design, data minimization, data-subject rights and a DPA - operating in line with the EU regulation's principles.
UK GDPR & Data Protection Act 2018
The same tooling - permissions, processing records and data-subject rights - serves the UK framework as well.
US state privacy laws - CCPA/CPRA & beyond
California (CCPA/CPRA), Virginia, Colorado, Texas and their peers: access and deletion requests, no sale of personal information, and transparency - built into the system.
Environmental & waste reporting regulations
Structured regulatory reports (PDF/Excel/API) with a full audit log - ready to file with any environmental regulator.
Public records, FOI & audits
When an auditor, regulator or resident asks - the answer is time-stamped, documented data, not recollection.
What it looks like in practice
External penetration testing
The systems undergo penetration testing by an external party - findings are remediated and re-verified.
Controlled access permissions
Every user sees only what they are allowed to: role separation, per-fleet/site/municipality permissions and action logging.
Privacy by design
Face and identifying-detail blurring, a defined data-retention policy, and operation aligned with GDPR principles and Israeli privacy law.
Your data never trains our models
Our AI models are trained on dedicated datasets we collect ourselves - customer data is used to operate the service only, never for training.
Flexible deployment
Cloud or on-prem per the organization's requirements - including separated environments for sensitive bodies.
Full transparency
Security questionnaires, certificates and process documentation - available to customers and evaluators on request. No black boxes.
Business continuity
Service monitoring, backups and a recovery plan - a control room that is down is not a control room.
Need security documentation for procurement or a tender?
We will send certificates, completed security questionnaires and any required document - usually the same business day.
Request security docs