Skip to content

Data handling and security

Employees' recordings reach the client's separate AWS account (EU, Frankfurt) over an encrypted connection. There the recording is received, turned into text and analysed with AI; the raw recording is deleted after processing and the transcript when it is finalised. The process map and database are stored encrypted, management reaches them with personal, logged access, and the automations work with the existing systems.

What we commit to in the contract

  1. Data is processed in data centres within the European Union.

  2. Encryption in transit and at rest; each client's data in a separate environment.

  3. Personal, logged access; multi-factor authentication for administrator accounts.

  4. Employees start the recording themselves, can pause it at any time, and only work-related content is captured.

  5. Raw video and audio are deleted after processing.

  6. Recordings may not be used to evaluate employees' performance.

  7. We do not use the data to train AI models, and we only use AI providers that exclude this in their contracts.

  8. We notify you of a personal data breach within 48 hours at the latest.

  9. The process map and the data are yours; after the contract ends you can export them within 30 days, or we hand them over in a machine-readable format on request.

  10. We commit to a monthly availability target of 99.5% for the platform.

Legal basis

Your company is the controller of its employees' data; backstreamAI acts as a data processor.

Your company determines and documents the legal basis for the recordings; for legitimate interest it carries out a balancing test and informs employees in writing in advance.

A question about data handling? Write to us