NOTE: Related Articles
This article is part of three topics on data management and minimising which cover:
Contents of this article
Access
By default, only the video recorder has access to their recording. Only users who the recorder specifically selects to share with have access to the recording. This access is controlled by a recorder who can remove the share at any time.
Administrators do not have access to recordings unless a user shares with them, however, administrators are able to view a thumbnail view of any recording to enable them to ensure the appropriateness of any uploaded recordings. These previews have no audio and only show one frame every few minutes, to ensure that the feature can not be used for other purposes.
We developed this tool as we believe it provides the right balance for administrators to achieve GDPR compliance and provide safeguarding needs as required in their role as administrators, whilst maintaining the privacy of the users' recordings.
More information about the media preview safeguarding feature can be found here.
Sharing
By default, users will only be able to share with other users in their organisation. This is to ensure data security and safeguarding requirements are met.
The exception to this is if a user is taking part in a Programme in which case as part of that programme sharing to a trainer or mentor in a different organisation may have been pre-authorised. Further information on Programmes can be found here.
If an organisation wishes to enable additional sharing to facilitate collaboration with other users outside of their organisation, an organisation's ‘network’ is able to be expanded to sharing either via the use of community groups or trust/collaboration networks, which both require administrator approval.
Further information on sharing outside of your organisation can be found here.
Downloading
By default, data is stored within the IRIS Connect platform and not able to be downloaded.
Downloading is a restricted feature to ensure data security is maintained, as any data downloaded from the platform is at a much greater risk of being compromised. Whilst downloading isn’t by default permitted, we appreciate there are occasions when it might be needed. The downloading feature can be enabled, by request, by your IRIS Connect administrator for your organisation.
Further information on downloading can be found here.
Security
IRIS Connect takes the responsibility of acting as a processor of personal data extremely
seriously. We constantly review our procedural, organisational and physical security to
ensure that we are offering a service that our customers can trust.
We have completed multiple external audits, gap analysis and penetration testing of our
services to ensure that we meet industry best practices and the principles of GDPR.
All data is stored and processed on Amazon Web Services (AWS) infrastructure.
Further information on the IRIS Connect security measures and controls can be found here.