Built to sit inside your security model, not around it.
MeshTrack is designed for operations where the network and the data matter as much as the tracking. The short version: nothing reaches into your network, everything is encrypted in transit, and you decide whether the platform and its data live in our cloud or entirely on your site.
No inbound access to your network
Gateways and, where used, the on-site server only ever make outbound connections. No port forwarding, no public IP, and no VPN account on your side. Remote management runs over an outbound-only encrypted tunnel that your firewall initiates — never the other way around.
Encrypted end to end in transit
Telemetry travels over MQTT with TLS; the dashboard and API are served over HTTPS with a valid certificate; the management tunnel is encrypted (WireGuard-based); and nightly off-site backups are encrypted before they leave the site.
You choose where your data lives
Run the platform in Sethala's managed cloud, or fully on-site on your own server — same software, your infrastructure. On-site, location data stays on your LAN and tracking keeps working even if the internet drops.
Central identity & least-privilege access
Sign-in is issued by a central identity service so accounts, roles and access revocation are handled in one place. Role-based access and per-site isolation mean each user reaches only the sites, zones and functions relevant to them.
Network posture
The firewall stays closed.
MeshTrack works entirely over connections your own equipment initiates outbound. There is nothing to expose to the internet.
People & privacy
Track spaces and assets — respect people.
Where people are tracked (visitor flow, lone-worker safety, mustering), privacy is built in, not bolted on.
- People-tracking is opt-in and POPIA-aligned. Tags can be issued anonymously, and individual tracking can be disabled per role or per zone.
- Location-data retention is configured by you — kept only for the period you set.
- We publish a privacy-impact-assessment template you can hand straight to your data protection officer.
- Access to a person's data follows the same role-based, per-site rules as everything else — no blanket visibility.
Monitoring & operations
Watched around the clock, under the SLA.
Sethala monitors the platform continuously — and, for on-site deployments, the server, its resources and service metrics (CPU, memory, disk, container health, certificate expiry, message throughput and gateway heartbeat) — in real time and remotely, with no inbound ports required. Thresholds page Sethala before a user notices, security patches and upgrades ship in agreed windows, and a full audit trail of movement and events is retained for investigations and reporting.
Doing due diligence?
We'll answer your security questionnaire.
Send us your security or POPIA requirements and we'll map them to how MeshTrack is deployed on your site — cloud or on-premise.