This whitepaper outlines the security and privacy measures implemented by R-Zero in its ODCV platform. It details how the system operates without compromising the security of building management systems (BMS) or the privacy of individuals. The document explains that R-Zero's occupancy sensors collect anonymous data, ensuring that no personally identifiable information (PII) is transmitted or stored. It emphasizes that all communications are outbound-only, eliminating the need for inbound firewall rules, and that the system integrates seamlessly with existing BMS. The whitepaper also highlights the encryption methods used for data protection, including TLS for data in transit and AES-256 for data at rest. Additionally, it discusses the governance of data, including compliance with SOC 2 Type II standards and the importance of customer data ownership. The document is designed for security, IT, and facilities leadership to assess the risks associated with implementing the R-Zero system.