Data Security and Privacy Compliance: The "Red Line" Problem of Interactive Whiteboard Procurement

From account, recording, cloud collaboration to AI and remote management, analyze how Qtenboard run locally in Q AI, DMS predictive diagnosis and fanless design to help schools, enterprises and system integrators clarify data boundaries, verify security capabilities and agree on supplier responsibilities.

October 2026Qtenboard Security Procurement GuideRead for about 16 minutes.

The whiteboard is not only a display device, but may also become a data processing entrance. For the same device, different functions correspond to different data streams. The teacher forgot to log out after logging in, and the next user can see the personal data. The recording of the meeting is used to generate the summary, but the purchaser does not know where the processing service is located. Remote support can view the screen without explicit authorization or an operation log. When the equipment is sent for repair, the course, meeting documents or account information are still saved.

The security assessment should cover the whole machine, OPS, pre-installed applications, cloud services and management platform, rather than just the screen hardware. The procurement documents shall specify the data processing and maintenance responsibilities at each level.

NIST's guidance on procurement of networked equipment also emphasizes that security requirements should be determined in conjunction with equipment and its suppliers and third-party services, rather than evaluating equipment in isolation. This guidance can be used as a reference for technical procurement and is not a statutory compliance certificate for Chinese projects.

Qtenboard (Shenzhen Qunmao)Founded in 2005, we have been dedicated to interactive display manufacturing for 20 years. We operate a 330,000㎡ smart manufacturing industrial park in Shenzhen and Guangzhou, comprising 16 factory buildings and 8 fully automated production lines, with a daily output capacity of 200 units, serving customers in 120 countries and regions worldwide. The Qtenboard interactive whiteboard covers a 55-110 inch full-size segment, is equipped with Q AI system-level framework and DMS device management system, supports MT9679/RK3588 multi-platform chip configuration, and provides a verifiable data security scheme from hardware to software for education, conferences and OEM/ODM projects.

1. draw data map first, then list safety requirements

Without knowing where the data is, it is difficult to judge risks and responsibilities.

It is recommended to establish a Function-Data-Service Provider matrix:

This table serves as a procurement survey framework and does not assume that all whiteboards will collect all of the above information.

Suggest Request for Materials

• Deployment Architecture and Data Flow Chart
• List of pre-installed apps and third-party services
• Privacy Policy and Data Processing Instructions
• Data storage location, duration and deletion method
• List of External Connections and Offline Features

How Qtenboard supports:Q AI core transcription runs locally on the device and can be used without an internet connection. Qtenboard can provide deployment schema descriptions and external connection lists. DMS supports private deployment options to help buyers define data boundaries.

2. seven procurement "red line" verification

The "red line" here is the project release condition, not the seven independent legal conclusions.

Red Line 01 Purpose and scope of data processing unclear

Suggested question: Why do each type of data need to be processed? What are required to complete the service and what are optional features? Can I turn off non-essential collection or cloud features? Does the privacy note cover all pre-installed applications?

China's Personal Information Protection Law requires that the processing has a clear and reasonable purpose, is directly related to the purpose, and is limited to the minimum necessary scope ".

How Qtenboard supports:Q AI core transcription runs locally on the device, and conference recordings and transcribed content can be processed without uploading to the cloud, reducing the scope of data processing from the architecture level. Q AI supports real-time translation of 166 languages and generates structured meeting minutes in 5 seconds, all of which are completed locally on the device.

Red Line 02 No special arrangement for students and sensitive personal information

• Distinguish between ordinary classroom documents and materials involving personal information
• Check student account number, recording and identification function
• If the handling of personal information of minors under the age of 14, clear guardian consent and special processing rules

The Personal Information Protection Law classifies personal information of minors under the age of 14 as sensitive personal information, and provides for guardian consent and special processing rules. This age threshold cannot be generally rewritten to cover all students or all minors.

How Qtenboard supports:Q AI local processing to reduce the risk of sensitive data leaving the country. DMS supports authorization by role and device group to limit access to student information.

Red Line 03 Cloud services and cross-border data path opacity

Suggested question: Where are the storage, backup and AI services located? Are overseas support personnel accessible? How are third-party processor and service changes notified? Where personal information is provided overseas, how should the applicable requirements be fulfilled?

The Personal Information Protection Law stipulates the conditions and relevant obligations for the exit of personal information; it cannot be simply written as "all cloud services are illegal" or "all data must be stored locally". Specific application should be combined with data, subject and project review.

How Qtenboard supports:Q AI core transcription runs locally on the device and can be used without networking, reducing the risk of data outbound from the architecture level. DMS supports private deployment options and can be deployed on customer-owned servers.

Red Line 04 Missing authorization and trace for remote access

• What are the permissions for Remote View, Control, and File Access?
• Can I Limit the Device Range and Valid Time of a Service Account?
• Are operators, times, objectives and results recorded?
• Can external access be turned off or revoked?

Test the remote operation and maintenance capabilities together with access control, and do not use "remote support convenience" as the default release reason.

How Qtenboard supports:Qtenboard DMS supports authorization by role and device group. Operation records include person, time, target, and result. Support temporary authorization mechanism, service account can limit the scope and validity of the device.

Red Line 05 AI and recording function only function introduction, no data description

• Is it local processing, customer server processing, or third-party cloud processing?
• How long are the original recordings, transcriptions and abstracts retained?
• Is it used for model training or other purposes?
• Can I disable AI and continue to use the underlying whiteboard?
• Does the deleted record also overwrite the associated service?

Do not take the vendor's phrase "not used for training" directly as a complete privacy compliance conclusion.

How Qtenboard supports:Q AI core transcription runs locally on the device, without needing to be uploaded to the cloud. The recording and transcriptions of the meeting can be saved or deleted directly after being processed locally without relying on third-party cloud services.

Red Line 06 Unclear responsibility for updates and vulnerability handling

• Who releases security updates and when will they be supported?
• Verify update source?
• Who can install or change the software?
• How do I report, remediate, and notify customers when a vulnerability is discovered?

The NIST Update Requirements Catalog contains authorized updates, valid source verification, and configurable update mechanisms that serve as a technical verification framework, but should not be advertised as "NIST-certified" for a product ".

How Qtenboard supports:All devices support free lifetime OTA updates. DMS supports bulk firmware updates, failed retries, and version rollback. MT9679 and RK3588 chip platforms can be managed separately.

Red Line 07 No arrangement for deletion, rework and withdrawal from cooperation

• After the user exits, how is the local data handled?
• How to clean up the account number and storage before and after repair?
• What should I do if I cannot delete normally due to a fault?
• Can I export, delete, and migrate data after the platform is disabled?
• How is the data in the backup handled as agreed?

It is recommended that these be included separately in the repair and end-of-service attachments, not only relying on the general warranty terms.

How Qtenboard supports:Qtenboard DMS supports data export, log export, and account export. OEM/ODM contracts can specify exit arrangements and data handover processes. Fanless design reduces the frequency of repair and indirectly reduces the risk of data exposure during repair.

How 3. private deployment and security advocacy are fairly understood

Deployment location is a condition, not a compliance conclusion

This section explains competencies in terms of "scope of evidence", does not disparage any deployment model, and does not treat individual certificates as data compliance endorsements for the entire project.

How Qtenboard supports:The Q AI core transcription runs locally on the device and requires no networking to use the underlying functionality. DMS supports private deployment options. Qtenboard can provide deployment architecture instructions and data handling instructions for specific projects.

Verification direction of 4. combined with Qtenboard disclosure

Distinguish between open functions, matters to be verified and contractual commitments

The Qtenboard public page introduces OCR, voice transcription, conference summary, SDK/API and DMS, and mentions the deployment direction of DMS client server. These can be used as an evaluation entry point, but they are not sufficient to prove that the entire whiteboard software, AI service or all models meet the privacy requirements of a specific project.

Qtenboard Core Competence Overview

Q AI system-level framework-core differentiation for local operation.

Q AI is deeply integrated at the hardware, software, and algorithm levels, with core processing performed locally on the device, allowing it to be used without an internet connection. The recording and transcribed content of the meeting can be processed without uploading to the cloud, reducing the risk of data exit and privacy disclosure from the architecture level. Q AI supports real-time translation of 166 + languages, generates structured meeting minutes in 5 seconds, and shortens the finishing time by more than 75%. Equipped with MT9679 or RK3588 chip platform, dedicated NPU completes AI processing locally.

DMS Device Management System-Predictive Diagnostics and Data Boundaries

Qtenboard DMS supports remote on-off, batch update, application distribution, permission control, and AI-driven predictive diagnosis. Support private deployment options to reduce network boundary risk. The predictive diagnostic module checks hardware parameters such as panel temperature, internal voltage and color values for early warning to avoid unexpected equipment downtime. The operation record contains people, time, goals, and results.

Fanless design-indirectly reduces the risk of data exposure

The Qtenboard uses a fanless interactive flat panel design, running with zero noise, no moving parts, and no maintenance cycles. The fanless design reduces dust inhalation, extends equipment life, and reduces hardware failures and unplanned downtime due to heat dissipation issues. Reduce the frequency of equipment repair and indirectly reduce the risk of data exposure during the repair process.

MT9679/RK3588 multi-platform chip local AI processing

Qtenboard Disclosure Capacity Verification Table

Delivered Project Reference

• European Education Brand ODM Project: 500 86-inch IFPD(RK3588 Platform), gold sample confirmation completed in 4 weeks, first piece yield 98.2
• Indonesia SKD local assembly project: 50 units, import cost reduced by about 18%, delivery cycle shortened by more than 30%

Recommended Brand Expression

Qtenboard will be introduced as partners involved in hardware manufacturing, software configuration, and platform integration, and customers will be encouraged to validate specific models, applications, and deployment scenarios, and to implement data processing and service responsibilities to project documents.

It does not directly declare "compliance with all privacy regulations by default", "all data does not go out of the device" or "support private deployment is compliance with government requirements".

5. procurement verification and contract attachments

Technical testing is not a substitute for legal review

Recommended Validation Process

1. List of functions and data
2. Confirm processor, deployment and external services
3. Verification of accounts, permissions, and remote access
4. Test off cloud function and offline operation
5. Test Exit, Export, and Delete
6. Check Updates, Vulnerabilities and Repair Arrangements
7. Rectification and retest of items that do not meet the requirements

Technical testing cannot replace legal review; work such as personal information protection impact assessment applicable according to law should be confirmed according to specific processing activities. The Law on the Protection of Personal Information stipulates the corresponding evaluation requirements for sensitive personal information, entrusted processing, and providing overseas.

6. Frequently Asked Questions

Conclusion: Data requirements are advanced to the procurement, testing and contracting stages.

The procurement red line is not to prohibit networking, AI or remote management, but to not accept solutions with unclear data paths, unclear access responsibilities and unverifiable maintenance commitments. The requirements are advanced to the procurement, testing and contracting stages in order to allow functional value and risk control to enter the decision at the same time.

QtenboardBacked by 20 years of manufacturing experience, 330,000 ㎡ industrial park, 8 full-automatic production lines, Q AI system-level framework (local operation, 166 language, 5-second minutes), DMS equipment management system (predictive diagnosis, private deployment), fanless interactive flat panel design and MT9679/RK3588 multi-platform chip configuration, it is oriented to global education, conferences and OEM/ODM projects, provide 55-110 inch interactive whiteboard, 4K display, 20-50 touch, 1.5mm precision, Android Windows OPS dual system, OEM/ODM/JDM/CKD/SKD customization and batch delivery services. Serving 120 countries and regions, with after-sales response within ≤4 hours.

Qtenboard can assist customers to complete the interactive whiteboard data security scheme from data map, security verification to contract attachment according to the requirements of education project, conference project and distributor dual product line.