Trust & Security

What the sensor collects, and what it never can

The sensor is a pressure pad under the seat cushion connected to a small controller. The service processes occupancy readings, timestamps, device identifiers and operating information needed to run and support the sensor.

No cameras, no microphones, no patient identifiers. There is no optical or audio component on the device to switch on, so it cannot record a face, a voice, or a name.

Where data lives

The platform runs on Amazon Web Services in the United States. The platform uses encrypted connections, and its Amazon S3 and DynamoDB storage use encryption at rest. The dashboard at app.smartchair.ai is delivered through Amazon QuickSight inside the same account boundary.

Who can see it

• Each customer site gets its own credentials. A designated super admin at the customer decides who in the group sees which locations.
• Access is limited to authorized people who operate, secure and support the service or carry out uses permitted by the customer agreement, and only to what their role requires.
• We do not sell customer data or disclose one customer's identifiable data to another. Any combined analysis or model development requires the permissions and protections described in our Privacy Notice and the applicable agreements.

Your data is yours

Raw occupancy readings are the customer's property under our customer agreement. You can ask for an export at any time, and we remove your data after the agreement ends on the schedule the agreement sets.

Healthcare

The sensor measures occupancy without identifying patients. Do not submit patient records through the website, scheduling tools or email. Before any patient-linked processing begins, its scope, required agreements including a Business Associate Agreement where applicable, and safeguards must be established.

The website

• Website connections use HTTPS.
• Analytics load only after you accept them; see the Privacy Notice.
• Demo booking is provided by HubSpot. Email is available as an alternative.

Report a vulnerability

If you believe you have found a security issue in the sensor, the platform, or the website, email info@smartchair.ai with enough detail to reproduce it. We acknowledge reports within two business days and do not pursue researchers who act in good faith within an agreed scope and give us time to fix the issue. This does not authorize access to customer data, disruption of service or testing outside that scope. Contact us before conducting security testing.

Security questionnaires

Procurement and IT teams can send vendor questionnaires to info@smartchair.ai. We answer them directly, in writing.