Privacy & Security

Occsupace's service does not collect any personally identifiable information (PII) about people in the spaces being measured and is privacy safe and secure

Occuspace was architected with privacy in mind and we are committed to protecting individual identities. The design of Occuspace makes it impossible to track any individual and no Personally Identifiable Information is ever collected and stored in our platform.

Privacy & Security Safeguards

• Occuspace collects zero personally identifiable information (PII) and is fully GDPR and CCPA compliant

• Occuspace sensors have passed security review and penetration tests by a certified, independent third-party security auditing firm

• Occuspace sensors never connect to any devices, and can only passively observe the BLE and WiFi activity in a space being measured

• Occuspace does use a unique identifier for each BLE and WiFi signal being measured. This unique identifier is based on the broadcasted MAC address of each radio

• Modern smartphones, laptops, and other consumer devices randomly rotate the MAC address of the BLE and WiFi radios for consumer protection

• Occuspace further enhances privacy by irreversibly hashing the broadcast MAC addresses into the unique identifiers used in data analysis

• MAC addresses are irreversibly hashed immediately on the sensor itself with the original MAC address value never stored locally or in the cloud

• Hashing is performed with SHA256 and reduced (truncated) in size to make it impossible to reverse

• A daily rotating salt is applied to the hashing process to further obfuscate the unique identifiers

• The sensors only transmit hashed data to the Occuspace cloud

• After hashed data is successfully sent to Occuspace it is permanently deleted from the sensors