The archive is on the node. The WAN is treated as hostile.
Transport
Node-to-orchestrator traffic uses TLS with mutual authentication on port 443. The node dials out. Local admin is a separate listener on 8443 and should stay on the site network.
Where video lives
Continuous recording is written on the edge node. The orchestrator relays playback; it is not a second vault holding every frame.
Licenses
Keys are node-locked. Step one of licensing emails an activation code, never a key. See licensing.
What this document is not
It is not a SOC 2 report or a PCI certificate. It is the trust model you can send a questionnaire against. Email sales@secure-watch.io if you need it answered formally.