Security and data protection
How skrivDET protects accounts, recordings, processing, and generated documents—and what users and organisations must still assess.
Security principles
- Authenticated access and registered-device limits
- Encrypted transport to skrivDET services
- Organisation-controlled providers and policy
- Restricted internal services and audit logging
- Human review before approval or sharing
Accounts, sessions, and devices
Access tokens and user-added secrets are stored in the operating system’s secure key store. Sessions expire and can be revoked. Organisations can limit devices per member and revoke a lost, replaced, or unauthorised device from the admin portal.
Processing and provider control
The active configuration decides which speech, PII, privacy-review, and document-generation services may receive data. In policy-governed enterprise use, locally defined providers are not mixed into the approved organisation configuration. Administrators must evaluate endpoint ownership, data location, contracts, retention, and model suitability.
Recording and storage
Recordings are saved resiliently on the device while recording. Organisation policy may define a time-to-live that deletes local audio, transcripts, privacy results, and generated documents. Temporary server-processing files are separate from job metadata and are retained only as required by the processing policy.
Privacy checks are decision support
PII detection and privacy review can produce false positives and can miss personal data. They do not decide whether processing is lawful. Users must assess purpose, necessity, access, accuracy, retention, and recipients before using or sharing a result.
Read the practical personal-data guideSharing and incident reporting
Use encrypted sharing when required by organisation policy and transfer passwords through a separate channel. Report a lost device, unexpected access, accidental sharing, or suspected security incident immediately to your organisation’s administrator or security contact. For a suspected skrivDET service incident, contact Kvasetech AS through the website.