Micropsi Industries uses data to prepare and train policies. These mathematical models generate actions for robot programs. A policy connects the raw sensor information captured by the camera and the force-torque sensor to the actions performed by the robot.
Beyond creating skills, Micropsi Industries does back-testing on existing data when new features are developed. This involves generating data sets, mixing anonymized data from multiple sources, and other machine-learning research in order to further improve models and algorithms. Skills will not be shared with third parties.
Furthermore, we store log file/diagnostic data to be able to help users in case of support requests. In order to create an initial password and Box ID, the MIRAI controller will be provisioned with the customer’s company name. The resulting Box ID is needed to be able to provide remote support.
- Where is Collected Data Stored and Secured?
- Who has access to the Data?
- Terms & Conditions Sec. 17
Where is Collected Data Stored and Secured?
Micropsi Industries uses AWS for data storage. The stored data is geographically located in the AWS eu-central-1 region, in Frankfurt, Germany. AWS uses triple redundancy, with no redundancy of data outside of eu-central-1. The data that MIRAI collects is HTTPS transport encrypted. A further encryption on storage level is not necessary, because read and decryption permissions would be in the same security realm. Whoever has reading access to the data, would also have access to the decryption key.
All AWS users globally can rely on the terms of the AWS GDPR DPA which will apply automatically from May 25, 2018, whenever AWS services are used to process personal data under the GDPR. Please find the complete Data Processing (DPA) here:
Note however that MIRAI data as described above does not fall under the provisions of the GDPR, as it is not personal data as defined by the GDPR.
Who Has Access to that Data?
There are three groups of Micropsi Industries employees that need access to user data in the context of their work. The three roles are developers, reviewers & admins.
- developers can list files (while not seeing the content) in order to develop and debug basic functionality
- reviewers can read files incl. content in order to debug and optimize policy performance. This role is intended for support staff, mainly machine learning and application engineers
- admins can write & delete files incl. content in order to ensure overall functionality
Access will be granted for valid reasons and on individual level. Only admins can grant access and individual access keys can be revoked anytime. Permissions & access rights are documented and regularly reviewed.
Why is the cloud on AWS, not on Micropsi Industries' own hardware?
There are no advantages of operating our own data centers, or operating our own server hardware in a data center that is not AWS’es. AWS has excellent service levels, superior security to anything we could provide at comparable cost, and enough capacity reserves to allow us to service the compute needs of our MIRAI installations even if they all decide to create a skill at the same time.
Renting compute capacity and services around security and availability while retaining full control of the data used for the computation is the de-facto default model for all sensibly run IT today.
As written in the Micropsi Industries Terms & Conditions:
Data Protection and Data Security
micropsi utilizes mandatory and industry standard technical precautions to protect customer data. The Customer is aware of the general risk that transmitted data may be intercepted during transmission. This applies not only to the exchange of information via e-mails that leave the system, but also to all other data transmission. For this reason, the confidentiality of data transmitted when using SaaS cannot be guaranteed.
The Customer is obliged to comply with applicable data protection laws with respect to the personal data of third parties, such as other Customers, which the Customer may obtain when using SaaS. The Customer will only use this data for contractual communication or for communication prior to entering in-to a contract. The Customer will instruct all its customers of executive bodies, employees, representatives, Authorized Users and agents accordingly.
The Customer agrees that micropsi may freely use, exploit and further develop all non-personal data and feedback provided by the Customer for the purpose of demand-oriented design, marketing, further development, optimization and the provision of its software.