Privacy for your people — security your CISO can verify
SafetyConnect captures the data your safety team needs, and nothing more. Every product decision starts with one question: will employees actually trust this on their phone?
Privacy by design, not as an afterthought
The most common reason organisations hesitate to deploy a driving safety platform is the fear that it will become a surveillance tool. We built SafetyConnect to make that fear concretely unjustified.
Business-hours-only by default
The driver app captures trips during working hours only. Employees control whether trips outside work hours are recorded, and the organisation can disable personal-time capture entirely.
No camera, no audio
The driver app uses standard phone sensors (GPS, accelerometer, gyroscope) only. We do not capture video, photos, or audio from employee phones
Data minimization
We collect only the data needed for safety insights. Driver scores, trip events, and risk patterns, not personal location histories, contacts, messages, or app usage.
Role-based access
Line managers see their team's data. Safety leaders see group-wide patterns. HR sees compliance metrics. Employees see their own scores and trends
Recognition over surveillance
The SafetyConnect Score is designed to reward safe driving and surface top performers, not to punish. Gamified feedback and coaching are the default workflow.
Enterprise-grade security as standard
ISO 27001 certified
Independently audited information security management system. Certificate available on request
Encryption in transit and at rest
TLS 1.2+ for all data in transit. AES-256 for all data at rest in our cloud environments
Access controls
Role-based access control (RBAC) for all user types. SSO via SAML 2.0 and OAuth 2.0. MFA available for admin roles
Audit logs
Every user action, login, data access, configuration change, data export, is logged with user ID, timestamp, and source IP.
Vulnerability management
Regular penetration testing by independent firms. Continuous vulnerability scanning. Documented incident response process.
Backup & disaster recovery
Automated daily backups with multi-region redundancy. Documented RTO and RPO targets for enterprise customers
Where your data lives, and who can access it
SafetyConnect is hosted on AWS, with the flexibility to host your data in the region your security and compliance policies require. Customer data is logically isolated by tenant, and customers retain full ownership of their data.
SafetyConnect does not access customer data except for documented support purposes with customer permission
Customers control their data
Documentation available on request
We share our full security documentation with your IT and security teams on request, rather than as public downloads. Tell our security team what your review needs and we will provide it.
ISO 27001, DPDP alignment, and documentation on request
Every deployment follows SOC 2 processes, GDPR and DPDP principles, and 256-bit encryption standards. Your data stays yours