Privacy and Security Brief

Introduction

VergeSense is committed to providing enterprise-grade privacy and security to all of our customers with our Occupancy Intelligence Platform which is SOC 2 Type II and ISO 27001 certified, as well as GDPR compliant. VergeSense sensors work by passing low-resolution data from the optical sensor directly into a computer vision and machine learning processor. This data is then processed locally on the sensor, and through VergeSense AI, it identifies the shapes of people and objects, not faces, words, or any personally identifiable information. In fact, the low-resolution technology that VergeSense utilizes cannot discern specific faces, words, or PII.

Data Transmission

How It Works

The sensor compiles an image and converts it into raw data points on the device. Images do not leave the sensors and are not stored on the device or the cloud during normal operations. The processed data is encrypted (TLS 1.2) and transmitted in JSON format to the VergeSense cloud. Your data is accessible at any time via our insights dashboards, 3rd-party integrations, and open API. 

Example Data

After data is processed locally, the data is sent to the cloud in JSON format. An example of the data that our entryway sensors transmit, as well as the specific details of the JSON format data means, is outlined below. 

Note: Our area sensors also transmit data in a JSON format, similar to what is noted in the example.

Security

VergeSense uses highly secure, enterprise-ready encryption for data in transit and at rest. For data in transit, all communication is encrypted using TLS 1.2. For our cloud-hosted data, all databases are encrypted using AES-256. VergeSense relies on industry-leading infrastructure from Amazon Web Services (AWS) for the management of our cloud infrastructure. This system must pass annual penetration testing.

ELS (edge-processing, low resolution, secure) optical technology ensures that anonymized metadata on the presence of people or objects is not transmitted across the network. From the low-resolution optical data, the machine learning process generates a JSON-formatted event, as described in more detail above. (See: Data Transmission) This event contains no contextual location information or images. Only information about the sensor, the detection status, the timestamp, and the space type identification is contained in the message.

VergeSense is SOC 2 Type II and ISO 27001 certified, and GDPR compliant, so you can have peace of mind that your data is both private and secure. VergeSense also uses two-factor authentication, role-based access, and controlled sharing to ensure that you maintain control and oversight over who can access your data. 

Conclusion

VergeSense is committed to offering occupancy intelligence that cannot and does not collect personally identifiable information, so your organization maintains the high privacy and security standards that you and your employees deserve. Both of the VergeSense occupancy intelligence solutions use ELS technology, are end-to-end encrypted, and are certified by global security agencies