Data Protection & Security
Our commitments for the asset and inspection data organisations entrust to AssetSentinel.
Commitments
Our commitments
Segregation
Each client organisation's data is logically segregated and access-controlled so that it is never visible to any other organisation. Segregation is enforced at the platform's core, applied uniformly to records, photographs and reports.
Encryption
All data is encrypted in transit and at rest.
Access control
Access is by individual, per-organisation user credentials only — no shared accounts.
Confidential file handling
Photographs and reports are private to the owning organisation. Nothing is publicly accessible.
Compliance
Regulatory alignment
AssetSentinel operates in line with UK GDPR and the Data Protection Act 2018. The client organisation remains the data controller; AssetSentinel acts as data processor solely to deliver the service.
- A Data Processing Agreement is provided at contract.
- A register of sub-processors is available to clients and genuine prospects on request.
- Data residency is agreed at onboarding, with UK/European hosting the standard arrangement for UK public-sector clients.
AI governance
AI processing
Analysis features are delivered under commercial terms that prohibit the use of client content for training AI models. All AI outputs are advisory only and are reviewed and approved by a competent engineer.
Data ownership
Your data remains yours
- The client owns and controls its data at all times.
- Data is exportable in standard formats.
- On termination, data is returned and/or deleted per contract.
- Client data is never sold, shared, or used for any purpose other than delivering the service.
Deployment
Deployment options
Offered as standard
Secure multi-tenant cloud, with enforced segregation.
Available on request
Dedicated single-tenant deployment with hosting-region selection, for organisations requiring physical as well as logical separation.
Provided at contract
Data Processing Agreement, sub-processor register, data-residency confirmation.
Assurance
Assurance status
| Item | Status |
|---|---|
| Platform-enforced data segregation | In place |
| Encryption in transit and at rest | In place |
| UK GDPR Data Processing Agreement | Provided at contract |
| Cyber Essentials certification | Scheduled |
| User-action audit trail | Roadmap |
| ISO 27001 | Roadmap |