Data Security

We agree how data is handled before any measurement is taken. By default your data stays as close to you as the work allows, we hold only what we need for the analysis, and we tell you where it is and who can see it.

We can run capture and analysis in the cloud, on your premises or at the edge, on request. For on-premise and edge arrangements, raw signals stay on your infrastructure and only the outputs you choose to share leave the site. For cloud-hosted work, we use infrastructure providers under confidentiality and data-protection obligations and we will name them in your agreement.

Access to customer data is limited to the people working on your project. Everyone who works with us is bound by confidentiality obligations, and our agreement with you sets out what we may and may not do with your data. We do not use one customer's data for the benefit of another in any identifiable or attributable form.

Where a project involves confidential information, we sign a non-disclosure agreement before detailed scoping. Where we process personal data on your behalf, we put in place a data processing agreement that meets the requirements of Article 28 of the UK GDPR. A copy of our standard data processing agreement is available on request.

We will tell you promptly if we become aware of a security incident affecting your data, so that you can meet your own obligations. Where a personal data breach is likely to result in a risk to individuals, we will notify the Information Commissioner's Office without undue delay and within 72 hours of becoming aware of it, as Article 33 of the UK GDPR requires, and we will inform affected individuals where the risk to them is high.

We do not currently hold third-party security certifications such as ISO 27001 or SOC 2. We will update this page if that changes.

Questions about how we handle data, requests for our data processing agreement, or reports of a suspected vulnerability: admin@acoubatt.ai, or the contact form on this website.