Blitzz Blog | Visual Support, Inspections & Jobsite Documentation

How Secure Is Your Video Inspection Platform? A Cybersecurity Awareness Month Checklist

Written by Blitzz Team | Oct 15, 2026, 4:30:00 PM

Video inspection platforms handle some of the most revealing footage a business can collect. A single session can show the inside of a home, a family’s belongings, a patient’s medical equipment, a utility’s critical infrastructure, an address, a face and a precise GPS location. If that footage is stored carelessly, shared with the wrong person or intercepted, the consequences reach well beyond an IT ticket.

October is Cybersecurity Awareness Month, the 23rd edition of the annual campaign led in the United States by the Cybersecurity and Infrastructure Security Agency and the National Cybersecurity Alliance. In 2026, CISA’s theme is “Securing the Next 250” and the NCA’s theme is “Don’t Make It Easy for Them,” and both point to the same fundamentals: strong authentication, careful access, phishing awareness and timely updates. The NCA frames the idea simply. Attackers rarely need to be clever. They benefit when organizations are predictable.

This guide applies those ideas to live video inspection. It explains the risks, offers a checklist for evaluating platforms, summarizes what Blitzz says about its own security and sets out practical habits for inspectors, adjusters, building departments, property managers and the customers they serve.

What is at stake

Live video inspection and remote visual support are used in insurance claims, building permits, property management, utilities, healthcare device support and more. Depending on the use case, sessions and saved records can include:

  • Interior and exterior images of homes and businesses
  • Faces, voices and other identifying information
  • Addresses and GPS location data
  • Photos of documents, serial numbers, meter readings and equipment labels
  • Protected health information in healthcare settings
  • Images of critical infrastructure, such as substations, equipment rooms and control cabinets
  • Details that reveal when a property is vacant or how it is secured

That information is useful to the organization and valuable to an attacker. A breach can lead to privacy violations, regulatory exposure, fraud, burglary, extortion and a loss of customer trust.

Threats specific to live video inspection

Most organizations already think about passwords and email phishing. Video inspection adds several specific issues.

Session link misuse. Inspections often start with a link sent by text or email. If the link is forwarded, guessed or left active too long, someone other than the intended participant could join.

Phishing and smishing. Customers who are used to receiving inspection links can be targeted by fake messages that imitate your invitation. A lookalike link can steal credentials, collect personal data or install malware.

Account takeover. If an inspector’s or adjuster’s login is compromised, an attacker may be able to start sessions, view recordings and access customer data.

Recording sprawl. Recording everything by default creates large archives of sensitive video that must be secured, retained and eventually deleted.

Media on personal devices. Photos and videos saved to a camera roll or shared through personal messaging apps escape the organization’s controls.

Location and metadata exposure. GPS data and timestamps are valuable for verification but sensitive in the wrong hands.

Third-party and integration risk. Connections to CRMs, claims systems, permit platforms and contact center tools widen the attack surface.

Excessive internal access. If too many people can see recordings, the chance of misuse or accidental exposure rises.

Weak vendor practices. A platform is only as secure as its encryption, access management, testing and incident response.

A security checklist for evaluating a platform

Use this table to compare platforms. Ask vendors for evidence, such as audit reports, documentation and contract terms, rather than relying on marketing claims.

Area What to look for
Encryption in transit Strong encryption for all video, audio and data in transit. Ask whether end-to-end encryption is used and how it works
Encryption at rest Encryption of stored recordings, photos and reports, with sound key management
Independent audits A current SOC 2 report or equivalent. Request it and review the scope and any exceptions
Authentication Single sign-on, multi-factor authentication and support for enterprise identity providers
Access control Role-based permissions that limit who can see sessions, recordings and reports
Audit logging Detailed, exportable logs of logins, session activity, downloads and administrative changes
Session link controls Unique, hard-to-guess links, expiration, single-use options and the ability to end a session at any time
Recording controls The ability to turn recording on or off, capture consent and restrict access to recordings
Retention and deletion Configurable retention periods and verified deletion
Privacy and compliance GDPR and other privacy law support, plus HIPAA support with a business associate agreement where needed
Testing and monitoring Regular penetration testing, vulnerability management and infrastructure monitoring
Incident response A documented process with notification timelines and named contacts
Subprocessors and data location A list of subprocessors, where data is stored and how transfers are handled
Integrations Secure authentication for APIs and connected systems, with clear data flows

What Blitzz says about its security

Blitzz describes its platform security on its security features page. According to Blitzz, its enterprise security includes:

  • SOC 2 certification, supported by third-party audits
  • A HIPAA-ready architecture with a business associate agreement available
  • GDPR and LGPD compliance
  • End-to-end AES encryption, with Blitzz stating that its own employees cannot access video sessions or customer information
  • SAML single sign-on, support for LDAP, ADFS and major identity providers, and multi-factor authentication
  • Event logs, audit logs and access records for compliance reporting and investigations

Blitzz’s help center adds that covered entities should be on a HIPAA-compliant plan. It says Blitzz does not permanently store protected health information, encrypts data at rest with 256-bit AES keys, uses intrusion detection and file integrity monitoring, conducts regular penetration testing with internal and third-party testers and signs a business associate agreement. It also advises customers to consult legal counsel about their own compliance responsibilities.

These are vendor statements. Treat them as a starting point. Request the current SOC 2 report, review the contract and business associate agreement, and run your own assessment before deploying any platform.

Why browser-based sessions help, and what they change

Many remote inspections now run in a phone’s browser without an app download. Blitzz’s browser-based video calling sends a unique secure session link by SMS, email or WhatsApp, with no downloads or app store visits.

That model has security advantages. There is no new app for the customer to install, update or misconfigure, and no persistent software left on their phone. It also reduces the chance that someone will install a fake app.

It also puts more weight on the link and the invitation process. If customers expect a text with a link, attackers can imitate it. Organizations should make their invitations recognizable, consistent and verifiable.

A secure inspection workflow, step by step

Technology controls work best when they are part of a simple, repeatable process. Here is a model workflow for a live video inspection.

  1. Authenticate the inspector. Sign in through single sign-on with multi-factor authentication.
  2. Send the invitation from the platform. Use the approved system or integration, not a personal phone.
  3. Use a recognizable message. Keep the sender, wording and link format consistent so customers can spot fakes.
  4. Verify the participant. Confirm the person’s name and the property address before starting.
  5. State the purpose and recording status. Explain what will be captured, whether the session will be recorded and why.
  6. Capture only what is needed. Keep the camera on the relevant area and avoid unrelated personal items.
  7. Save evidence in managed systems. Photos, recordings and reports belong in the platform and linked records, not personal devices.
  8. End the session and expire the link. Close the session when the inspection is complete.
  9. Apply retention rules. Keep records for the required time, then delete them.
  10. Review the audit log when needed. Use logs to investigate unusual access.

Best practices for inspectors, adjusters and field staff

The NCA’s theme is about small, repeated habits. These are the ones that matter most for video inspection teams.

  • Protect your login. Use a unique password, multi-factor authentication and single sign-on where available.
  • Use official channels only. Send invitations from the approved platform or integrated system.
  • Confirm identity. Verify that you are speaking with the right person at the right address before starting.
  • Do not forward links. If someone else needs to join, create a new invitation.
  • Record only when needed. Follow policy, obtain consent where required and avoid capturing bystanders.
  • Keep media in managed systems. Do not save inspection photos to personal cloud accounts or share them through personal messaging apps.
  • Treat screenshots as records. Handle them with the same care as any other inspection file.
  • Update devices. Install operating system and browser updates promptly.
  • Report suspicious activity quickly. Unexpected logins, lookalike messages and lost devices should be reported immediately.

Best practices for customers and participants

Organizations can also help customers stay safe.

  • Tell them what to expect. Explain when and how you will contact them, what the message looks like and who the sender is.
  • Keep invitations consistent. Predictable sender names, phone numbers and wording make lookalikes easier to spot.
  • Offer a way to verify. Give customers a callback number on your website to confirm an invitation.
  • Explain recording and privacy. Be clear about what is captured, how it will be used and how long it will be kept.
  • Never ask for credentials. Do not request passwords or full payment card numbers during a video session.

Governance: policies that make the technology safer

Classify your data. Decide which sessions are most sensitive, such as healthcare, minors, critical infrastructure and vacant properties, and apply stronger controls.

Set retention limits. Keep recordings and photos only as long as business, legal or regulatory needs require.

Limit access. Grant access by role. Supervisors can use silent observer mode for quality assurance and training, but access should be logged and justified.

Review integrations. Examine each connected system, such as CRM, claims, permit and ticketing tools, for authentication, permissions and data flows. See Blitzz’s integrations page for connected platforms.

Train your people. Include video inspection scenarios in security awareness training, especially phishing and smishing examples.

Review vendors every year. Reassess SOC 2 reports, subprocessors and security practices.

Questions to ask any video inspection vendor

  1. Can you provide your current SOC 2 report and describe its scope?
  2. How is video encrypted in transit and at rest, and who holds the keys?
  3. Is end-to-end encryption available, and how does it apply to recordings and stored files?
  4. How do session links work, and can they be limited by time or use?
  5. Which authentication options do you support, including single sign-on and multi-factor authentication?
  6. What audit logs are available, and can we export them?
  7. Where is data stored, and which subprocessors handle it?
  8. What are the default and configurable retention settings?
  9. How do you support HIPAA, GDPR and other privacy requirements, and will you sign a business associate agreement?
  10. How often do you conduct penetration testing, and can you share a summary?
  11. What is your incident response process and notification timeline?
  12. What happens to our data when the contract ends?

A mini incident playbook

Even strong controls cannot eliminate risk, so prepare for the day something goes wrong.

  • Contain. Disable affected accounts, revoke active session links and isolate compromised devices.
  • Preserve evidence. Save logs and records before making changes.
  • Assess. Determine what data and which customers were involved.
  • Notify. Follow contract, legal and regulatory notification requirements, including notice to your vendor.
  • Communicate. Give affected customers clear, honest information and next steps.
  • Learn. Update policies, training and controls based on what you find.

Make it hard for them

The NCA’s 2026 message is simple: do not make it easy for attackers. For video inspection, that means choosing a platform with strong, verifiable security controls, setting clear policies, training people on realistic threats and building small habits that protect customers’ most private spaces.

To learn more about Blitzz’s security approach, review the security features, read the case studies or schedule a demo and bring your security questionnaire.

Remote Pre-Winter and Move-Out Inspections for Property Managers

Property managers handle two kinds of inspections that look very different but share the same challenge: getting eyes on a unit without losing a day to travel and scheduling.

Pre-winter inspections are about prevention. Heating systems, windows, gutters, pipes and exterior spaces need to be ready before cold weather brings frozen pipes, drafts, ice and emergency calls. Move-out inspections are about documentation. They establish the condition of a unit at the end of a tenancy, support security deposit decisions and speed up the turnover that gets a unit back on the market.

Both are well suited to remote video. Daylight saving time ends on November 1, which means shorter days and fewer working hours for site visits, and winter weather is already arriving in parts of the country. This guide explains how property managers can use remote video inspection for pre-winter and move-out inspections, what to check, how to protect tenant privacy and how to build a consistent, defensible process.

Why remote inspections suit property management

Blitzz’s real estate and property management page describes remote video inspections as live visual assessments between property managers and tenants, owners or field personnel. They are used for move-in and move-out inspections, rental property assessments and virtual home inspections without traveling to every property. The page says managers can connect with tenants in minutes instead of scheduling site visits days out, and can see conditions, document move-out damage or verify maintenance in real time.

The advantages are practical:

  • Less windshield time. A manager responsible for dozens or hundreds of units can complete more inspections per day.
  • Faster scheduling. Tenants can join from a phone link at a time that works for them.
  • Earlier problem detection. Regular check-ins can catch small issues before they become expensive repairs.
  • Better records. Time-stamped photos and recorded walkthroughs create evidence for deposits, insurance and owner reporting.
  • Consistency. A standard checklist helps every unit get the same review.
  • Owner transparency. Owners can see what was found without traveling to the property.

Pre-winter inspections: what to check

A pre-winter inspection focuses on systems and conditions that fail in cold weather. A tenant, maintenance technician or on-site staff member walks the unit while the manager guides the camera. Your lease terms, local rules and manufacturer guidance determine what is appropriate to inspect.

Area Typical pre-winter checks by video
Heating system Thermostat operation, visible condition of the furnace or heat source area, clean and unblocked vents and registers, filter condition and date
Smoke and carbon monoxide alarms Presence in required locations, visible condition and a witnessed test
Windows and doors Drafts, damaged seals, cracked glass, loose weatherstripping and working locks
Plumbing Exposed pipes in unheated areas, visible insulation, water heater condition and signs of leaks or staining under sinks
Outdoor faucets and hoses Hoses disconnected, faucets shut off or covered where appropriate
Roof, gutters and downspouts Debris, sagging, loose sections and drainage away from the building, viewed from the ground
Exterior and grounds Trees or branches near the building, steps and walkways in good condition, lighting and snow or ice hazards
Attic and basement Visible insulation, moisture, pests and signs of leaks, if safely accessible
Fireplaces and chimneys Visible condition and clearance, with servicing by professionals as required
Dryer vents Clear, secure and not blocked
Common areas and parking Lighting, handrails, drainage and snow-removal readiness

Remote zoom helps read labels and see small cracks or gaps, and remote flashlight control lights up dark utility closets, crawl space entries and attic hatches. Markup and live pointer tools let the manager flag the exact item that needs attention. Many findings become work orders, such as replacing a filter, sealing a window or insulating a pipe. For more on how teams prepare equipment for cold weather, see our guide to winter readiness inspections for field assets.

Safety comes first. Tenants and staff should never climb onto roofs, enter unsafe attics or crawl spaces or handle electrical panels to get a better camera angle.

Move-out inspections done remotely

A move-out inspection records the unit’s condition at the end of a tenancy. A strong record protects both landlord and tenant.

Before the inspection. Send the tenant notice of the inspection, the checklist and the session link, following your lease terms and local rules. Offer a time window. Some states require or encourage a pre-move-out inspection so tenants can fix issues, so check local law.

During the session. Walk each room in a consistent order. Capture wide shots first, then close-ups of walls, floors, ceilings, fixtures, appliances, cabinets, windows and doors. The manager can guide the camera, ask the tenant to open cabinets or run faucets and flag issues with markup.

Meter readings and appliances. OCR can capture meter numbers, serial numbers and appliance labels without manual typing.

Evidence. Save timestamped HD photos with GPS location data. With consent, a recorded session gives a complete walkthrough. An AI call summary and inspection report can compile findings.

After the session. Compare the results with the move-in condition report and separate normal wear from damage. Prepare an itemized estimate and share it with the tenant according to your deadlines and local rules.

Legal documentation rules. Security deposit and inspection rules vary by state and are changing. For example, California has recently added photo documentation requirements for rental units, so confirm current requirements with counsel before changing your process.

Live versus asynchronous walkthroughs

Property managers can use two kinds of remote inspection.

Live guided sessions. The manager and the tenant, owner or technician connect in real time. This works well when you want to ask questions, direct the camera and discuss findings immediately, such as at a tenant move-out or when verifying a repair.

Asynchronous video walkthroughs. A staff member records a guided walkthrough using a checklist, and a manager, estimator or owner reviews it later. This works well for turnovers, vacant units and large portfolios where scheduling a live call would slow things down.

Blitzz’s Durango Turnkey Services case study describes the second model. Durango helps investors and property managers get rental units back on the market faster. Before Blitzz, its managers relied on physical checklists, phone photos and emailed files, which slowed estimates and turnovers. With Blitzz, Durango uses guided video walkthroughs that follow built-in checklists tailored to each unit type, with custom permissions so each stakeholder sees what they need. The case study also notes that managers do not need to learn complicated software or change how they walk a unit.

Most portfolios benefit from both approaches. Use live sessions for tenant interactions and complex issues, and asynchronous walkthroughs for routine inspections and turnovers.

Document everything with BlitzzCam

Property managers often need a record that spans multiple visits: move-in condition, mid-lease inspections, maintenance work, pre-winter checks and move-out. BlitzzCam field photo documentation helps teams capture GPS-stamped, time-stamped photos filed by job and phase, which makes it easier to compare conditions over time and show what a contractor did. BlitzzCam is listed as early access on the Blitzz site, so confirm availability with the Blitzz team.

A strong photo history also helps with insurance claims, owner reporting, contractor oversight and disputes.

Tenant experience and privacy

A remote inspection takes place inside someone’s home, and tenants have privacy rights. How you run the session affects trust.

  • Give proper notice. Follow your lease and local law on notice and entry. A remote session is not an exception to those rules.
  • Explain what will happen. Tell the tenant what you will look at, whether the session will be recorded and how the information will be used.
  • Get consent for recording. Recording rules vary by state, so follow your legal guidance.
  • Limit what you capture. Avoid personal documents, family photos and belongings that are not relevant. If something sensitive appears, avoid capturing it or remove it from the record where appropriate.
  • Give the tenant control. The tenant holds the camera and decides where to point it. Let them know they can stop at any time.
  • Offer alternatives. Some tenants will prefer an in-person visit or have limited internet access.
  • Secure the data. Use a platform with strong security controls, limit access and set retention periods.

Because sessions run in a browser with no app download, tenants can join with a phone and a link.

Maintenance verification and contractor oversight

Remote video is also useful between inspections.

  • Verify completed repairs. A short video call can confirm that a leak is fixed, a heater is working or a window is sealed.
  • Triage maintenance calls. A manager can see an issue before sending a technician, which helps decide who to send and what to bring.
  • Support after-hours and emergencies. In cold weather, a burst pipe or heating failure needs a fast response. A quick video check can help decide whether to dispatch emergency help.
  • Oversee contractors. Managers can review work at several sites without driving to each one.

Blitzz’s property manager blog also discusses using early inspections to move from reactive to proactive management, and using live video, close-ups and timestamps to assess damage for insurance purposes.

A simple rollout plan for your portfolio

Weeks 1 and 2: prepare. Choose a pilot group of properties, write pre-winter and move-out checklists by unit type, and set recording, consent and retention policies with your counsel.

Weeks 3 and 4: pilot. Run remote inspections at a small number of properties. Train staff to guide the camera and give tenants a short how-to message.

Weeks 5 and 6: review. Compare time, findings, tenant feedback and work orders with your usual process. Adjust checklists and scripts.

Week 7 onward: expand. Add more properties, connect your property or service platforms through integrations where useful, and keep refining.

Best practices for property managers

  • Build checklists by unit type. A studio, single-family home and multifamily building have different needs.
  • Use the same order every time. Consistency makes comparison easier and reduces missed items.
  • Capture wide and close shots. Wide shots show context, and close-ups show detail.
  • Narrate the findings. Short spoken notes help later review.
  • Link to move-in records. Keep move-in and move-out photos organized by unit and room.
  • Assign clear follow-ups. Turn findings into work orders with photos attached.
  • Train staff and tenants. A short guide on how to join and hold the phone improves results.
  • Plan for weak signal. Offline mode lets users capture images and data without a connection and upload later.
  • Know when to go in person. Structural concerns, mold, safety hazards and complex damage may need a site visit.

Metrics to track

  • Inspections completed per manager per week
  • Travel time and miles avoided
  • Time from move-out to completed estimate
  • Time from move-out to unit ready
  • Deposit disputes and outcomes
  • Winter maintenance calls, such as frozen pipes and heating failures, compared with prior years
  • Work orders generated by pre-winter inspections
  • Tenant satisfaction
  • Share of inspections handled remotely versus in person

Limits and honest expectations

Remote inspection is a strong tool, but it is not magic.

  • Video does not replace a licensed professional’s inspection of heating, electrical or structural systems, or an assessment of mold.
  • Some conditions are hard to see on camera, such as hidden leaks, small cracks or odors.
  • Image quality depends on lighting and the person holding the camera.
  • Some tenants may not want to join a video session, and some may have limited technology.
  • Local laws on notice, entry and deposits still apply.
  • Disputes may still occur, so keep thorough records and apply policies consistently.

Get ready before the cold arrives

Pre-winter and move-out inspections are two of the best uses of remote video for property managers. One helps prevent winter damage and emergency calls. The other speeds turnover and makes deposit decisions easier to defend. Both reward consistency, good documentation and respect for tenants.

Start with a small pilot. Choose a handful of properties, build a simple checklist, test your process and refine it before cold weather and heavy turnover season arrive.

To see how remote video inspection and BlitzzCam field photo documentation can support your portfolio, explore Blitzz’s real estate and property management solutions, read the case studies or schedule a demo.