Data minimisation
Only data relevant to account management, activities and operational events is processed.
Protection built into the platform
Privacy by design
Data protection is not an afterthought: it guides Ixotrack’s product, technical and organisational choices from the earliest design stages.
Our approach
Collecting less data is the first security measure.
Ixotrack is designed to process only the information necessary for the operational purposes configured by the customer. The platform deliberately avoids unnecessary invasive features, reducing risk for users, workers and organisations.
No GPS
Ixotrack does not access, record or store geographic coordinates and does not follow users’ movements.
No profiling
Data is not used for behavioural advertising, personalised marketing or hidden analysis of individuals.
Protective defaults
Optional features, such as an identification photo, remain disabled until the customer chooses to use them.
Controlled access
Information is accessible according to roles and permissions defined within the customer organisation.
Traceability
Operational events are recorded with a user identifier and server timestamp, without continuous surveillance.
Access event recording
Evidence of an event, not monitoring of a person.
When an entry or exit is recorded, Ixotrack stores the user identifier, event type and server-generated timestamp. It does not collect location, routes, audio, video or biometric data.
EventEntry or exit
UserInternal identifier
Date and timeServer timestamp
GPSNot collected
Privacy by default
Initial settings limit processing.
Default settings are intended to support the minimum processing required. The customer may configure users and features according to its needs and remains responsible for the purposes and legal basis of processing performed through the platform.
Essential dataFirst name, surname, email, phone and photo only where enabled by the customer.
Optional photoNot used for facial recognition or biometric processing.
Technical cookiesOnly tools required for session management, security and operation.
Swiss hostingInfomaniak infrastructure hosted in Switzerland.
Shared responsibility
Technology, configuration and organisation must work together.
Ixotrack provides a platform designed to limit data and protect access. The customer organisation determines processing purposes, enables users, assigns roles, defines applicable retention periods and provides notices to workers.
Ixotrack / INNOVA
Protects the platform, processes data under customer instructions and adopts appropriate technical and organisational measures.
Customer organisation
Defines purposes and legal bases, configures the service and properly informs workers and users.
Authorised users
Use personal credentials and follow the security procedures defined by their organisation.
This page describes the design principles currently applied to Ixotrack. It is not an ISO or SOC 2 certification or independent legal opinion. Measures are updated as the platform’s technical, regulatory and organisational context evolves.