Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

How does OPTOVERA protect worker privacy?

Limited data, voluntary association choices, protected PINs, and restricted purposes safeguard worker privacy.

OPTOVERA is designed to support workplace safety review while limiting the data it uses and the purposes for which it uses that data.

  • Data minimization. OPTOVERA does not require names, personal email addresses, government identification numbers, or payroll data for User measurement records. Users are enrolled with an identifier assigned by the Customer (the Platform ID) and a mnemonic username. These safeguards pseudonymize User records; they do not make them anonymous.
  • Choice of association method. No User is required to enroll a biometric identifier. Where a User chooses PIN, the iris is not enrolled and no Iris Identification Data is created in any form. Where a User chooses iris recognition, the encrypted, proprietary Iris Identification Data is processed separately from measurements, baselines, and results, and is used only to associate Scans with that User.
  • PIN protection. The User sets their own PIN on the Device. No administrator, supervisor, or SOBEREYE personnel sets, issues, or can view it. The PIN is stored only as a per-User salted PBKDF2-HMAC-SHA256 derivation, held in the iOS Keychain and verified locally on the Device. It is never stored or transmitted in clear text.
  • Eye Video. In both association methods, the Device records a short video of the eye, because the pupillary response is measured from it. This Eye Video may show the iris, but its capture does not create Iris Identification Data, and outside the optional iris recognition function it is not processed to identify the User.
  • Purpose limitation. OPTOVERA does not identify the cause of a response alteration. OPTOVERA data is not sold or used for advertising, marketing, or unrelated analytics.
  • Roles and security. The Customer acts as Controller and SOBEREYE as Processor under the OPTOVERA Data Processing Agreement. SOBEREYE processes the data on the Customer’s documented instructions and operates an ISO/IEC 27001-certified Information Security Management System.

Access to results and follow-up actions should follow the Customer’s configured roles and internal policy.