Secondary Label
Security & Privacy Details
Casa
Smart Security Camera
N200
Firmware version:
2.5.1
- updated on:
2020-09-25
The device was manufactured in:
United States
Security Mechanisms
Security updates
security updates: How the device receives security updates
expiration date: The date until which the device is guaranteed to be updated
automatic: Device will automatically receive security updates
Automatic - Available until at least
2022-01-01
Access control
access control: How the device can be accessed and who is allowed to access it
password: Password is required to access the device
user changeable: User may change the credentials that are required to access the device (for security purposes, make sure to change all default credentials before using the device)
factory default: The credentials required to access the device have default values that are initially generated by the manufacturer
multi account: To access the device, user needs to create an account, multiple user accounts may be created
Password
- Factory Default
- User Changeable
Multiple user accounts.
Security oversight
security oversight: Manufacturer's use of security audits related to this device
internal external audit: Security teams both inside the company and from outside of the company are commissioned to assess the security practices of the company against a set of documented standards
Audits performed by internal and third-party security auditors
Ports and protocols
ports and protocols: List and justification of all the physical interfaces, network ports, and listening services
Hardware safety
hardware safety: Safeguards the manufacturer has in place to protect the device hardware from tampering
Software safety
software safety: Safeguards the manufacturer has in place to secure the software of the device
Personal safety
personal safety: Safeguards the manufacturer has in place to protect users against safety risks, including abuse and harassment
Vulnerability disclosure and management
vulnerability disclosure and management: How transparent and timely the manufacturer has been in disclosing the discovered vulnerabilities, managing them, and mitigating their potential harms
Software and hardware composition list
software and hardware composition list: Software and hardware components that are used in the device
Encryption and key management
encryption and key management: How user's data will be protected using encryption
Data Practices
| Sensor data collection | Visual | Audio | Motion |
|---|---|---|---|
| Sensor type | Camera | Microphone | Motion sensor |
| Data collection frequency | Continuous | Continuous | Continuous |
| Purpose | Providing and improving device functions | Providing and improving device functions | Providing and improving device functions |
| Data stored on the device | Identifiable | Identifiable | Pseudonymized |
| Local data retention time | Up to a year | Up to a year | Up to a month |
| Data stored in the cloud | Identifiable | Identifiable | No cloud storage |
| Cloud data retention time | Up to a month | Up to a month | No retention |
| Data shared with | Manufacturer | Manufacturer | Manufacturer |
| Data sharing frequency | Periodic | Periodic | Periodic |
| Data sold to | Not sold | Not sold | Not sold |
| Other collected data | User's contact information is collected | ||
Data linkage
data linkage: Other sources of information the collected data will be linked with
Data will not be linked with other data sources
What will be Inferred from User's Data
could be inferred from users data: In addition to the information that is directly being collected by the device and/or the mobile application, what additional information about user
No data inference
Special data handling practices for children
special data handling practices for children: Whether the manufacturer has specific safeguards to handle data from children
special handling: The manufacturer has specific safeguards to handle data from children
No
In Compliance with
compliance: Privacy and security laws and standards the manufacturer is complying with
GDPR
Privacy policy
privacy policy: Detailed privacy and security practices
More Information
Call
Casa
with your questions at
phone: Manufacturer's phone number
412-313-2793
Email
Casa
with your questions at
email: Manufacturer's email address
info@casa.com
Functionality when offline
functionality with no internet: How the device is expected to function when no internet is available
limited offline: Device will remain partially functional when no internet is available
Limited functionality on offline mode
Functionality with no data processing
functionality with no data processing: How the device is expected to function when data is not being processed
full data processing: Device will remain functional when data is not being processed
Limited functionality on dumb mode
Physical actuations and triggers
physical actuations and triggers: How the device is expected to behave in response to triggers
Device blinks when motion is detected
Compatible platforms
compatible platforms: List of platforms the device can work with
Amazon Alexa
As a plugin
CMU IoT Security and Privacy Label CISPL 1.0 iotsecurityprivacy.org
