https://docs.labkey.io/en/docs/certificazioni/Recent content in Security and Compliance on LabKey DocsHugo -- gohugo.ioenhttps://docs.labkey.io/en/docs/certificazioni/conformita-normativa-e-protezione-dei-dati/Mon, 01 Jan 0001 00:00:00 +0000https://docs.labkey.io/en/docs/certificazioni/conformita-normativa-e-protezione-dei-dati/Privacy by design: only the necessary data, for the necessary time LabKey is configured to collect exclusively the data functional to attesting presence and to access control, with no scope for further processing beyond these purposes and without requiring the data subject’s consent as a precondition for operation. Personal data processed: first and last name (the only mandatory fields), email address and phone number (optional). The platform does not process biometric data or other special categories of data, and does not introduce any personal monitoring features beyond the mere attestation of presence at the installed device.https://docs.labkey.io/en/docs/certificazioni/sicurezza-fisica-infrastruttura-e-certificazioni/Mon, 01 Jan 0001 00:00:00 +0000https://docs.labkey.io/en/docs/certificazioni/sicurezza-fisica-infrastruttura-e-certificazioni/Physical security of the devices The access point’s electric release contact is integrated inside the control unit, which must be installed in premises not accessible to the public. Authorization logic is governed exclusively by the control unit and never by the peripheral interface device (keypad, NFC reader, QR code reader): this means that tampering with a peripheral device does not make it possible to unlock the access point. For additional reinforcement, it is possible to: