Chason

Security Overview

Our company has established a comprehensive data security protection system covering physical environment, network system, personnel management, and regular audits, strictly protecting customers' original data, annotated materials, project documents, and confidential datasets. The complete measures are as follows: 1. Physical security measures for office space The entire work area, entrances and exits, corridors, and designated workstations are covered by 24-hour high-definition CCTV surveillance, with video recordings retained for a period of no less than 90 days. Special personnel are assigned to manage and control the monitoring backend permissions; The factory area adopts a tiered access control system, with designated work areas isolated independently. Only authorized project personnel are allowed to enter with their exclusive employee cards. External visitors must register and be accompanied by designated personnel, and are strictly prohibited from entering the designated computer room; Unified management and control of annotation workstations: Workstation computers are prohibited from being equipped with USB interfaces, optical drives, Bluetooth, and wireless transmission devices, to prevent unauthorized copying and data export; private mobile phones, cameras, and recording devices are prohibited from being brought into the annotation workshop in the factory area, and a unified storage locker is set up at the entrance; All paper project materials should be uniformly archived and locked away, and obsolete drawings and printed data should be uniformly shredded and destroyed, rather than being discarded at will. II. Network Security Protection Strategy Establish a physical isolation architecture for internal and external networks, ensuring that the internal network for annotation tasks is completely disconnected from the Internet, and data only flows through the encrypted internal network of the enterprise, eliminating the risk of data leakage from the external network; Multi-layer firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) are deployed in real-time to intercept abnormal access and attack behaviors, and to record network access logs throughout the process; All terminals are uniformly deployed with enterprise-level antivirus software and terminal security control systems, with automatic updates to the virus database. Employees are prohibited from installing unknown software without authorization; Data transmission and cloud storage are encrypted throughout the entire process, with customer files stored in tiers. Different project data is logically isolated, and independent access permissions are set; The server room maintains a constant temperature and is dust-proof, equipped with a hierarchical access control mechanism. Only the operation and maintenance personnel can log in to the backend, and all data downloads and exports are automatically logged and recorded. III. Employee Confidentiality Standards and Data Operation Management All employees are required to sign a general corporate confidentiality NDA upon joining the company. Personnel involved in confidential or highly sensitive customer projects are required to additionally sign a special project confidentiality agreement, and their confidentiality obligations continue even after leaving the company; Regularly conduct specialized training on data privacy, information security, and industry compliance (including regulations such as the Personal Information Protection Law). New employees must complete a security assessment before taking up their positions; Implement the principle of least privilege: Employees can only view the task data assigned to them and are not allowed to access materials across projects or clients; data is only to be used for the current annotation project, and screenshots, forwarding, external dissemination, and retention are strictly prohibited; Project management personnel and quality inspection personnel are authorized at different levels, and key operations (such as batch export and data transfer) require double-check and approval; it is prohibited to transmit any project data via private WeChat or email; Upon completion of the project, all original data and intermediate files on the local system must be cleared within a specified timeframe according to the client's requirements, and a confirmation receipt for data destruction must be completed. IV. Regular security audits and compliance verification Conduct monthly self-inspections on terminal, network, and workstation safety internally, complete full-process data processing audits quarterly, verify operation logs, permission assignments, and equipment control records, and form audit reports; Every year, we engage third-party organizations to conduct information security compliance testing, benchmarking against industry standards for data annotation and AI dataset privacy management to complete compliance verification; Cooperate with clients to conduct on-site surprise inspections and online permission audits at any time, and provide supporting materials such as monitoring records, network logs, employee confidentiality agreements, and equipment control ledgers as needed; Establish an emergency response plan for security incidents. In the event of abnormal access or unauthorized data manipulation, immediately initiate the process of tracing the source, mitigating the damage, and implementing corrective measures, while simultaneously informing customers.