Security and data

The website explains our work, hosts films and educational content, and collects station-interest submissions. It is separate from a customer's operational workcell.

The station-interest endpoint validates submitted fields, limits request size, checks the request origin and stores accepted submissions in a database. Those are specific implementation measures, not a claim of comprehensive security certification.

Read the privacy notice and browser-storage information for the public site's data practices.

A deployment discussion should establish the data and operating boundaries before access is provided. Confirm the following requirements with your team:

• Which camera images, scene records and trial recordings are collected?
• What stays on the station, what is transmitted and where is it stored?
• Who can access the records, and how is access removed?
• How are updates, credentials, backups and incident contacts handled?
• What retention, export and deletion arrangements apply?
• Which actions require operator review, and which system controls the robot?

Any customer-specific security commitments, data-processing terms, service levels or network requirements belong in the applicable written agreement.

Product pages explain Prism workflows and include recorded demonstrations. Sample data and operational estimates are labeled where they appear.

This site does not assert SOC 2, ISO 27001 or another certification, nor does it promise universal compatibility or a guaranteed accuracy level.

For the physical method and known constraints, read the technical brief. For a proposed deployment, ask us for evidence relevant to your actual task.

Email hi@lightcompany.ai with “Security report” in the subject. Include the affected URL or component, a clear description and non-sensitive reproduction steps.

Do not include credentials, private customer data or harmful payloads in the initial message. Avoid accessing data that is not yours or disrupting a live service. This page is a reporting contact, not authorization to test private systems or a promise of a bounty.