No CPE fleet required. No carrier dependency. No subscriber friction. ProvisionCore handles subscriber location verification, device lifecycle, and hardware integration so your platform can focus on content.
Every bootup request walks a priority chain. The fastest, most authoritative signal wins. External calls only happen when necessary.
Device ID, WAN IP, or user ID matched against the tenant whitelist. Instant grant, no further checks.
A hardware-bound device on the home network reports its presence directly. Registry confirms the subscriber's location without relying on IP ownership lookups. Works on CG-NAT networks where IP-based detection fails.
Incoming WAN IP matches the stored home IP and the cache has not expired. No external call needed.
External lookup maps the WAN IP to a carrier subscriber ID. Matched against the account. Result cached with TTL.
Client asserts first activation or known home session. WAN IP saved as new home address for future requests.
Every feature is multi-tenant and configurable per operator.
Each hardware device carries a unique cryptographic identity provisioned by the operator. Reports are verified server-side before any in-home decision is made.
Register up to N locations per dongle. Velocity checks flag suspicious moves. Operators set their own cap and distance thresholds.
FollowDevice, LocationLocked, or MultiLocation — set per tenant. Adapts to any content licensing agreement.
Hardware dongle identifies itself by serial and HMAC key, not IP alone. Works even when multiple subscribers share one public IP.
Invalidate a dongle key instantly. The agent wipes the key locally and enters unprovisioned state on next heartbeat.
Every in-home decision logs its source — whitelist, hardware registry, cached IP, or lookup service. Full operator visibility.
A storage interface decouples the service from any specific database. Connect it to whatever you already run — no migration required.
Providers without CPE fall back to carrier IP lookup or app-reported IP. Hardware upgrades the accuracy, it's not a requirement.
Every query, whitelist, and device registry is scoped to a tenantId. Operators share infrastructure, never data.
Operators pick the mode that matches their content licensing requirements. Configurable per tenant, applied in real time.
In-home wherever the dongle is. Dongle = identity, not location.
In-home at up to N registered locations. Velocity checks protect against abuse.
In-home only at the first registered address. Moves rejected until re-verified.
Same platform, three deployment models. Start with SaaS, move on-premise when you need to.
You get credentials, we handle the infrastructure. Best for OTT and smaller operators.
Docker image or bare metal. You own the data. Required by most large carriers.
Management and analytics in the cloud, subscriber data stays on-premise.
No hardware required to get started. The dongle improves accuracy — it's not a prerequisite.
| Provider type | Hardware dongle ProvisionCore-certified |
CPE / router agent BYO OpenWrt hardware |
App SDK | IP lookup fallback |
|---|---|---|---|---|
| Cable / MVPD Owns CPE fleet |
● | ● | ● | ● |
| Telco IPTV Owns STB, not router |
● | ◐ STB agent | ● | ● |
| OTT / streaming No hardware |
◐ Optional | ○ | ● | ● |
| Satellite Owns dish / receiver |
● | ◐ Receiver agent | ● | ● |
| Enterprise / B2B Managed network |
○ | ● Gateway | ● | ○ Whitelisted |
● Full support ◐ Partial / platform-specific ○ Not applicable
Pay for provisioned devices. Volume discounts apply automatically. Hardware cost is $0 if you use your own compatible equipment — the agent runs on any OpenWrt-based router or CPE your team controls. ProvisionCore-certified dongles are available if you need ready-to-ship hardware.
Up to 50,000 provisioned devices
50,000 – 250,000 provisioned devices
250,000 – 1,000,000 provisioned devices
1,000,000+ devices or bespoke requirements
All tiers include a monthly platform fee. Bring your own hardware at no extra cost — install the open agent binary on any compatible OpenWrt CPE or router you control. ProvisionCore-certified dongles available for operators who need ready-to-deploy hardware. Contact sales for a hardware quote.
Talk to us about your provider type, subscriber scale, and hardware setup.
We'll find the right deployment model for you.