Every occupancy-analytics vendor calls themselves privacy-first. It is the easiest claim in the category to make and the hardest to verify. So before you believe ours, here is the test we think you should apply to all of us.
01 · THE POLICY TEST FAILSThe policy test fails
Most "privacy-first" claims resolve, on inspection, to a policy: a retention window, an access-control list, a promise not to enable facial recognition. Policies are real, but they share one weakness, they can be changed. A policy is a decision a company made, and a company can make a different decision next quarter, or under acquisition, or under a subpoena.
If the privacy property of a system depends on a policy, then the privacy property is exactly as durable as the company's incentives. That is not nothing. But it is not architecture.
02 · THE ARCHITECTURE TESTThe architecture test
Here is the test. Ask the vendor: what would have to physically change for this system to identify a person?
If the answer is "we would change a setting" or "we would update the retention policy": that is a policy guarantee. If the answer is "we would have to ship different hardware, because the raw frame never leaves the sensor and there is nowhere for it to go": that is an architecture guarantee.
Occivar sensors run the model on-device. The raw pixels are processed in the sensor's memory and are never written to disk, never transmitted, never buffered for upload. What leaves the device is a count vector, anonymous numbers. There is no facial-recognition feature flag because there is no frame to run it against by the time data leaves the room.
03 · WHY THIS MATTERS COMMERCIALLYWhy this matters commercially
This is not only an ethics argument. It is the reason our sales cycle into councils and universities is short. When the privacy answer is structural, the legal review is about the architecture diagram, not about trusting a roadmap. A council lawyer can read "the frame never leaves the sensor" and sign. They cannot sign "we promise not to turn on the feature."
Build the guarantee into the part of the system that is expensive to change, and you have built something a customer can actually rely on.