I love how easy it is to share deliverables via url links, can you speak on how secure this is?
Hi I’m looking into using pix4dcloud. My question involves how secure it is. What happens to the photos/data when uploaded to the cloud for processing?
Thankyou
JD
Regarding Pix4Dcloud data security, this is what we currently offer:
- end to end encryption (HTTPS) during transport.
- Encryption at rest in S3 (using AWS service, meaning AWS has the key).
- optional “confidential” on the account which means that Pix4D employees get no access to the data (except for a few admins). This is an option that you can ask me to enable for your projects.
- GDPR compliant processes (see this post).
Pix4Dcloud sharing links can be activated or deactivated but cannot be protected by a password at the moment.
You can also define your data privacy preferences from the Privacy section of your Pix4D account.
-
When you agree to share personalized analytics and diagnostics to help Pix4D improve your experience Pix4D may analyze your use of our products in order to improve the most used features and invest in developing new features. Pix4D may also reach out to you for early feedback regarding your experience.
-
When you agree to allow Pix4D algorithms to learn and improve from your project details Pix4D may improve its algorithms by using your project data as training data for machine learning. These algorithmic improvements speed up the performance and increases the quality of the results our products produce.
Would you like share more details on your use case so that I can give you additional information on the functionality? Thanks
Hi there, I want to resurrect this topic just to see if there are any changes. I have clients asking similar questions and I want to assure them of the security of the input and output imagery and annotations and overlays.
Also, can I ask if password protected links are on the development roadmap?
Many thanks
Kerry
Hey, thank you for resurrecting the topic of security.
The information above is still valid. We have some documents in the legal portal that can help you answer those questions. On the topic of data privacy, please have a look at the Sub-Processor document, the Data Processing Agreement, and the Privacy and Personal Data Protection Policy.
I am happy to consider writing documentation on specific topics related to the security of the PIX4Dcloud application.
We are not considering password-protected links because we believe they provide limited security. First, we offer a similar feature through the “share link”. The token you find in the share link is more secure than most passwords a human would set up. We think that sending an email with the project URL and the password is very similar to sending an email with the share link.
The improvement we are investing in for our customers is a much better security gate based on authenticated access. We are working on adding better Organization support and User management for this. We plan to release role based access control at the level of the project and folder this year. This way, someone can invite a customer to his organization and provide them access to only the project they can read or contribute to, and withdraw this access when it is not needed anymore.