Device and data boundaries
Only work terminals owned by the enterprise or with clear management authorization in accordance with the law will be managed.
SECURITY & TRUST
保护数据，也约束每一次管理操作
双环境、远程查看、文件与摄像头管理、录像和紧急锁控都必须置于明确权限内。谁能操作、何时审批、如何追溯，与安全能力本身同样重要。
TRUST MODEL
透明管理、员工知情、管理员受约束
SWZ 仅用于企业自有或依法授权设备。企业应明确管理目的和使用范围，通过内部制度完成必要的人员告知，并让管理员同样受到分权、审批和审计约束。
GOVERNANCE BY DESIGN
六项机制建立可信管理边界
客户可以结合适用要求、劳动制度、内部安全政策和实际数据类型，配置权限范围、审批流程与保存策略。
System announcement and personnel notification
Companies should describe the purpose and scope of screen viewing, video recording, cameras, file access and data disposal.
Minimum necessary permissions
Assign permissions by role, organization, device and operation type to reduce access unrelated to responsibility.
Approval for critical actions
Actions such as remote locking, data clearing, video export, and camera calling can be configured for approval.
The administrator leaves traces throughout the process
Managers cannot bypass the audit link, and important operations record the subject, object, time, reason and result.
Save and delete strategies
Customers can set the access scope, retention period and deletion process of videos, logs and files based on the system.
AUDIT CHAIN
管理人员也不能绕过审计链路
远程查看、远程控制、录像访问、文件操作、锁定和数据处置都应记录操作主体、目标对象、时间、原因与结果。
- 身份与角色明确是谁、以什么角色发起操作。
- 对象与范围记录组织、设备、文件和操作类型。
- 审批与理由高影响动作可要求审批和处置原因。
- 结果与归档保留执行结果，为复盘和追责提供依据。
Risk incident response pathFrom detection to review
- 01
Detect anomaly
Policy or watchdog identifies risks and retains necessary context.
- 02
Locate endpoint
Quickly locate targets by organization, device and online status.
- 03
Apply lockdown
Lock, shut down or dispose of data after permission verification or approval.
- 04
Review audit trail
Record the operation subject, object, time, cause and result.
Tiered permissionsCritical-action approvalComplete audit trail
CONTROL YOUR BOUNDARY
把管理平台部署在适合的数据边界内
五种部署方式覆盖快速启用、自有基础设施、隔离网络和跨地域组合，具体安全配置以最终技术方案为准。
SaaS
Quick activation and unified maintenance by the service platform.
Private deployment
Deployed within enterprise-owned infrastructure and security perimeter.
LAN offline
Adapt to independent office networks isolated from the public network.
Hybrid deployment
Flexible combination by organization, region and data level.
Dedicated hosting
Independent resources and dedicated operation and maintenance boundaries.
使用方责任边界
SWZ 守望者仅用于组织依法拥有或获得明确管理授权的终端。使用方应根据适用要求完成必要的制度公示、权限配置、人员告知和数据保护措施。
查看合法与授权使用说明START WITH CONTROL
在演示中验证权限、审批与审计流程
除了产品功能，我们也可以围绕管理员角色、操作审批、日志保存和部署边界进行方案沟通。