TN1

Security Overview

Access Control - Role-based access is implemented to ensure that only authorized personnel can view or process sensitive data. Strong, unique passwords and multi-factor authentication (MFA) are required for all accounts. Anonymisation and Redaction - Sensitive information in datasets is anonymized to limit the exposure of personal or proprietary data during annotation. Secure Workstations - Annotators’ computers are secured with up-to-date antivirus software. External storage devices are disabled to protect against data leaks. Physical Security - Physical access to workspaces and servers is secured through the use of locks to maintain security and prevent unauthorised entry. Data Handling Policies - Policies for data handling, retention, and deletion are established to ensure consistency and compliance. Employees are trained on best practices for data security and the proper handling of sensitive information. Monitoring and Auditing - Access logs are regularly monitored to detect and address unauthorized activity. Use of Secure Platforms - Secure annotation platforms with built-in security measures, such as user authentication, role management, and audit trails, are utilized to ensure data protection. Non-Disclosure Agreements (NDAs) - Require employees and contractors to sign NDAs to ensure they understand their responsibility to protect sensitive data.