Security and data handling

Agree how the data will be handled before it moves.

Annotation security is not a logo at the bottom of a page. It is a project-specific agreement about what enters the workflow, who can access it, where it is processed, how it is delivered and when working copies are removed.

Data minimization

We agree which files, fields and sensor streams are required for the task before transfer. Material that does not support the objective should stay out of the workspace.

Named access

Project access is limited to the roles needed for annotation, review and operations. Customer, worker and partner access is provisioned deliberately rather than made public by default.

Transfer and delivery

Source and delivery methods are selected with the customer. Formats, locations, credentials and acceptance checks are documented before production work.

Retention and deletion

The project plan records working-copy retention, delivery retention and deletion responsibilities. Sensitive projects can require shorter, project-specific periods.

Partner oversight

Partner involvement and subcontracting expectations are disclosed for the engagement. Access is limited to the approved work and subject to Grasp oversight.

Incident escalation

The operating plan names escalation contacts and the information needed to investigate an access, integrity or delivery concern.

Before a pilot

The decisions we document.

The exact controls depend on data sensitivity, deployment context, workforce location and customer policy.

  • →Data categories and sensitivity
  • →Approved processing locations
  • →Named project roles
  • →Partner and subcontractor access
  • →Transfer and credential method
  • →Working-copy retention
  • →Delivery acceptance and deletion
  • →Incident and escalation contacts

Evidence before claims

Grasp does not present a certification, customer control or geographic processing commitment unless it has been documented for the applicable service. Ask for the current security evidence, data-processing terms and partner details relevant to your project.