Data protection, access control, and retention

Purpose

This article explains how OPTOVERA protects data on the Device and in the cloud platform.

Data on the Device

The Device stores only the information required for operation and temporary synchronization, including the synchronized user list with salted PIN derivations held in the iOS Keychain. If the Device is offline, completed measurements may remain locally as Pending measurements until connectivity is restored and synchronization is completed. Users cannot browse, export, copy, or otherwise access locally stored OPTOVERA data through the normal Device interface.

Data in the cloud platform

Data in the OPTOVERA cloud platform is protected through encryption in transit, encryption at rest, tenant-level data separation, authenticated access, role-based access control, controlled administrative access, monitoring, backups, and recovery procedures. Cloud-hosted data is encrypted at rest using managed cloud and database infrastructure controls, including Amazon Web Services and MongoDB Atlas.

Access and retention

Access is limited to authorized customer users and authorized SOBEREYE personnel who require access for approved operational, support, or security responsibilities. No role can view a PIN. The Customer, as Controller, determines retention periods under the Data Processing Agreement. Deletion from active systems follows the Customer’s documented request, the end of the retention period, or termination of the Service; residual copies may remain temporarily in protected backups until overwritten through established cycles.