Data is captured through mobile phone cameras. The capture process is conducted (where relevant APIs are available) through the browser. The image or video is stored in the browser temporarily to confirm the user is happy to submit. If the browser is refreshed, or once the data is submitted by the user, any image or video held in the browser is destroyed. When the user submits, Data is sent to cloud storage.
Data transmission:
Data sent between mobile devices and back end storage is sent over HTTPS with SHA-256 with RSA Encryption certificates. For data interactions between the Isla backend and the Trust, we have an HSCN connection provided by BT.
Data at rest:
Data is stored in UK based cloud servers with Google Firebase. To ensure secure data storage:
256-bit server side encryption is employed on all stored data
Server side access rules act as an additional control layer to prevent any unauthorised access or editing of stored data
Data is backed up every 2 hours into a secure data bucket in a different city within the UK to ensure business continuity and resilience in case of data integrity issues with the primary data source