Your Data, Your Control

Privacy

Safety intelligence without surveillance. GuardX detects hazards, not identities. Your video stays local, your data stays yours.

Zero
Facial recognition
100%
Local processing
Never
Data sold

Privacy by Design

Privacy isn't an afterthought at GuardX—it's foundational to how we build every feature. We prove that workplace safety and personal privacy can coexist.

No Facial Recognition

We detect safety behaviors and PPE compliance without identifying individuals. No biometric data is ever collected or stored.

On-Premise Processing

Thor devices process video locally in your facility. Raw footage never leaves your premises unless you explicitly configure it.

Data Minimization

We collect only what's necessary for safety detection. No tracking, no profiling, no unnecessary data retention.

Encryption Everywhere

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Customer-managed keys available for enterprise.

Right to Deletion

Request complete data deletion at any time. We verify and confirm cryptographic deletion within 30 days.

Transparency

Clear documentation of what we collect, why we collect it, and how long we keep it. No hidden practices.

What GuardX Does & Doesn't Do

What We Do

Detect PPE compliance (hard hats, vests, gloves)
Identify hazardous behaviors and near-misses
Monitor zone compliance and access control
Assess ergonomic risks (RULA & REBA)
Generate aggregate safety analytics
Trigger automated safety responses

What We Don't Do

Identify or recognize individual faces
Collect biometric data or fingerprints
Track individual employee movements
Monitor productivity or work speed
Sell or share data with third parties
Store video longer than configured retention

Granular Privacy Controls

You control exactly how GuardX handles your data. Configure privacy settings per device, zone, or organization-wide.

Face Blurring
Automatically blur faces in all recordings and clips. Enabled by default.
Privacy Zones
Define areas where recording is disabled entirely (restrooms, break rooms).
Metadata-Only Mode
Send only analytics to cloud—no video or images leave your facility.
Retention Policies
Set automatic deletion schedules from 24 hours to 1 year per data type.
Privacy Settings Organization-wide
Face Blurring
Blur faces in all recordings
Local Processing Only
Keep all video on-premise
Metadata-Only Cloud Sync
Send only analytics, no media
Video Retention
Analytics Retention

How Your Data Flows

Understand exactly where your data goes and what controls you have at each stage.

1

Capture

Thor cameras capture video in your facility

On your premises
2

Process

Thor Hub runs AI detection locally

On your premises
3

Sync

Metadata syncs to Atena cloud (configurable)

Your choice
4

Analyze

Atena generates trends and insights

Encrypted & isolated

Full Control: You can configure the system to keep all data on-premise (steps 1-2 only), sync metadata only (no video), or enable full cloud features. The choice is yours.

Privacy Compliance

GuardX helps you meet privacy regulations worldwide with built-in compliance features.

EU
Compliant

GDPR

Full EU General Data Protection Regulation compliance with DPA and SCCs.

  • • Data subject rights support
  • • EU data residency option
  • • Privacy impact assessments
  • • Designated DPO
CA
Compliant

CCPA/CPRA

California Consumer Privacy Act and Privacy Rights Act compliance.

  • • Right to know
  • • Right to delete
  • • Right to opt-out
  • • No data selling
CA
Compliant

PIPEDA

Canada's Personal Information Protection and Electronic Documents Act.

  • • Consent management
  • • Purpose limitation
  • • Access rights
  • • Canadian data centers
BR
Compliant

LGPD

Brazil's Lei Geral de Proteção de Dados compliance.

  • • Lawful basis tracking
  • • Data subject rights
  • • Cross-border controls
  • • Incident reporting
UK
Compliant

UK GDPR

United Kingdom's post-Brexit data protection framework.

  • • UK data residency
  • • ICO registration
  • • IDTA support
  • • DPO available
Support

Worker Privacy Laws

Tools for workplace monitoring disclosure requirements.

  • • Notice templates
  • • Consent workflows
  • • Works council support
  • • Union consultation

Data Subject Rights

GuardX provides tools to help you fulfill data subject requests efficiently.

Right to Access

Export all data associated with an individual in standard formats.

Right to Erasure

Complete deletion with cryptographic verification within 30 days.

Right to Rectification

Correct inaccurate data and update incomplete records.

Right to Portability

Export data in machine-readable formats (JSON, CSV).

Third-Party Data Sharing

We are transparent about who has access to your data and why.

We Never:

  • Sell your data to third parties
  • Use your data for advertising
  • Share data without your consent

We Only Share With:

  • Subprocessors (listed in DPA)
  • Legal requests (with notification)
  • Your authorized integrations

Subprocessor List

Current subprocessors with access to customer data:

Amazon Web Services USA/EU

Cloud infrastructure and storage

Google Cloud Platform USA/EU

AI/ML processing (optional)

Datadog USA

System monitoring and logging

Twilio USA

SMS and voice alerts

Full list with DPA details available in your account settings.

Privacy Resources

Privacy Questions?

Our privacy team is available to discuss your specific requirements and compliance needs.

Email: privacy@guardx.cc