Security & Product Integrity

Security is part of product trust

VIVID treats digital security and physical product identity as connected responsibilities. The public website explains the product; the traceability platform helps connect a physical roll to an official record; access controls protect the operational workflows behind that record.

Account and access controls

• Authorized Admin and Center users sign in through protected account workflows rather than public verification routes.
• Permissions are applied by role and capability so operational access can be limited to the functions a user needs.
• Security-sensitive account actions are designed to be auditable and protected against unauthorized changes.
• Session and credential handling are separated from ordinary public website content.

Product identity and traceability

A VIVID roll may carry a visible serial number and barcode, with a public QR verification token where configured. These identifiers allow the official system to distinguish the physical roll from generic packaging or imagery.

Verification confirms the official record associated with the submitted identifier. It should not be interpreted as a guarantee against every form of physical label tampering, misuse or unauthorized resale.

Privacy by limitation

Public verification is designed to reveal only information appropriate for a public authenticity check. Customer or installation information may be masked or omitted where full disclosure is unnecessary.

Operational records remain behind authenticated platform access and applicable permissions.

Auditability and operational integrity

Important operational actions are designed to leave an audit trail so changes to serialized inventory, installations, warranties, users and permissions can be reviewed. Traceability is most useful when the system preserves history instead of silently rewriting it.

Responsible security reporting

If you believe you have found a security issue affecting the public website, verification service or authorized platform, use the official VIVID contact page and provide enough detail for the issue to be reproduced safely. Do not access, alter or retain data that is not yours, and do not disrupt service while testing a suspected issue.

No absolute-security promise

Security controls reduce risk; they do not make any internet-connected service invulnerable. VIVID may update controls, infrastructure and procedures as the platform evolves and as new risks are identified.