Security and compliance

Built for your duty of care. Designed for trust.

A safety system holds sensitive data about your people. Here is how SafetyEvo protects it, and how it supports the records you need to keep.

Your duty of care

Support for the lone working duties you already have.

UK employers must assess the risks of lone working and put sensible controls in place, under the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999.

SafetyEvo gives you the controls and the evidence: a way for staff to raise the alarm, a way to check on them during risky tasks, and a record of every alert and response. It supports your risk assessment. It does not replace it.

Incident register

Every alert, who handled it and how it ended.

Response times

How long from alert to acknowledgement, by team.

Check-in records

Timers set, met, extended and missed.

Weekly drill

A test alert that checks the whole chain works.

Security

How we protect your data

Encrypted in transit

Every connection between the app, the console and our servers uses TLS.

Two-step verification

Everyone who uses the office console signs in with a password and a code from an authenticator app.

Strong sign in protection

Passwords stored with Argon2. Sign in locks after repeated wrong tries. Sessions can be ended remotely by an admin.

Roles on every action

Staff, responder, supervisor and admin. Each request is checked against the role, and each company sees only its own data.

Append only records

The audit log and incident timelines can be added to but never changed or deleted, enforced by the database itself.

Hosted in the EU

On a dedicated server in Germany, kept separate from other services, with daily backups that we test by restoring.

GDPR and privacy

Monitoring that staff can accept.

Tracking employees is personal data processing. SafetyEvo is designed so it stays proportionate.

  • Location is collected only while a shift is open, and the app always shows when tracking is on.
  • Staff are told in plain words what is collected, who sees it and for how long, before they start.
  • Responders see a location only during a shift or an open alert. Older history needs a supervisor or admin, and every look is logged.
  • Location trails are deleted after a period you set (90 days to start). Incident records can be kept longer for insurance and legal needs.
  • No facial recognition and no biometric clock in.
  • We will help you complete a data protection impact assessment before your team starts.

What SafetyEvo is, and is not

Alerts go to your own office team, the people you name, in the order you choose. SafetyEvo is not an accredited alarm receiving centre and does not contact the emergency services for you. Your responders decide what happens next, which may include calling 999.

Questions from your safety or IT team?

We are happy to walk them through how it works and how your data is handled.