Data governance / Version 1.0 — 11 August 2026
Field operations need operational safeguards.
This page explains the governance controls Ensomos applies when sourcing and operating physical-AI data collections. The specific controls, retention period, and delivery requirements for a project are confirmed in its written scope and agreement.
01. Worker and workplace consent
We use documented participant consent and workplace authorization before capture begins. A collection is paused when the agreed permissions, releases, or site conditions are not in place.
02. Site authorization and compensation
We confirm site approval with the authorized operator and compensate participants under the collection arrangement. Project records identify the governing capture protocol and the approvals required for that deployment.
03. DPDP compliance and confidential processes
We design collection flows around India’s Digital Personal Data Protection Act, 2023, and the project-specific privacy obligations that apply. NDAs, restricted areas, screens, documents, customer information, and confidential processes are addressed before capture and during review.
04. Hardware custody and deployment QA
Capture hardware is assigned, tracked, and tested before field deployment. Customer-supplied systems are operated only after an agreed deployment and QA test verifies the capture setup, handling procedure, and quality bar.
05. Encryption, transfer, and access
We use access-controlled storage and encrypted transfer methods appropriate to the project. Access is limited to the people who need it for collection, quality review, delivery, or support, and access activity is logged where the system supports it.
06. Retention, deletion, and recollection
Retention, deletion, and any required recollection are agreed in the commercial scope. If a session does not meet the agreed protocol or quality threshold, we assess whether recollection is appropriate and follow the project’s approvals before doing it.
07. Public-sample approval
Public previews are separate, evaluation-only derivatives. A release review checks participant authorization and screens for bystanders, site identity, badges, documents, screens, confidential material, and third-party brand marks before publication.
Questions or reports
To report a privacy, authorization, or security concern, contact priyansh@rewardssphere.com. For the legal terms governing website samples, read our Terms and Privacy notice.