Why a reviewer asks
A cloud service holds a copy of whatever you give it, and your review has to decide whether that copy is acceptable. The useful answer is a list: what is stored, why, and what is never stored. What each screen sends is on What a screen sends to Screenly, and the companies that process the data are on Sub-processors.
What Screenly stores
Grouped by where it comes from.
- 01
Your account and its members
Names and email addresses, roles, the workspaces each person belongs to and the date their access ends, if one is set. There are no passwords to store: people sign in with a passkey, an email code, Google, GitHub, Microsoft or SAML.
- 02
Your content and how it plays
The files you upload, the addresses of web pages and apps you add, playlists, schedules and labels. Uploaded video is converted once so every screen can play it.
- 03
Credentials for dashboards and APIs
Each one is encrypted for the one device that uses it. Where a device cannot keep a secret, such as a TV or a web browser, the credential stays on Screenly's servers and the content is rendered there.
How credentials stay secure - 04
What your screens report
Check-ins, the network and hardware report, screenshots unless privacy mode is on, and proof of play records where it is turned on.
- 05
Audit logs
Applies to: Enterprise
Each action a user took in your account, and when. Retention, export and SIEM forwarding are not stated yet.
- 06
Billing and support
Your plan and invoices. Payments run through Stripe, so Screenly never stores card details. Support requests are kept in Zendesk.
What Screenly never stores
By design, not by setting.
| Topic | Why |
|---|---|
| Passwords | Screenly accounts have had no passwords since 21 May 2026 |
| Card details | Stripe processes payments; Screenly never sees the card number |
| Patient data | Screenly holds no patient records, and a queue calls a ticket number, never a name |
| Your internal pages | A ScreenlyOS device loads them from your server. Screenly sees them only in a screenshot, and privacy mode turns that off |
| Training data for AI | Screenly has no built-in AI and sends nothing to an AI model |
Questions
Where is our data hosted?
On Amazon Web Services and Google Cloud, processed in the United States.
Can we choose where our data is hosted, such as the EU?
Not today. Data is processed in the United States.
Are the credentials for dashboards and APIs kept encrypted?
Yes. Each one is encrypted for the one device that uses it, or kept on Screenly's servers where a device cannot hold it.
Does Screenly store patient data?
No, by design. Queues call a ticket number to a counter or room, never a name.
Is there an audit log?
Enterprise accounts see each action a user took and when. Retention, export and SIEM forwarding are not stated yet.
Can Screenly staff see our content?
Access is limited to the people who need it to run the service, and they are bound by confidentiality obligations. The controls are audited for SOC 2 Type II and certified to ISO/IEC 27001:2022.