Platform
Security and GDPR for digital work instructions
How Actarion handles GDPR, hosting, access control and the EU AI Act for digital work instructions. Clear answers for IT, works councils and auditors.
In short
Digital work instructions process company know-how and data about employees, so security and GDPR compliance are part of every rollout. This page explains how Actarion handles data protection, hosting, access control and the EU AI Act. Certifications and hosting details are confirmed per contract and listed here once verified.
How it works on the shop floor
How is the data protected?
- 1
Agreements.
A data processing agreement under the GDPR is part of the contract.
- 2
Hosting.
The platform runs in the cloud with specialised hosting providers, or on request in your own environment. The data location is fixed in the contract.
- 3
Access.
Role-based permissions determine who sees content and execution data. Users can sign in with Microsoft Entra ID (Azure AD).
- 4
Certification.
DeepSight publishes its security documentation in the DeepSight Trust Center. We request the certificates and reports your IT department needs.
- 5
Transparency.
DeepSight publishes a Trust Center and a privacy policy.
What do IT and the works council want to know?
- Where is our data stored, and who can access it?
- Does the system track individual operators, and how is that data used?
- Are camera images from the shop floor stored?
- Does AI in the platform fall under the EU AI Act?
What data does the platform process?
| Data | Example | Purpose |
|---|---|---|
| Content | SOPs, images, videos, 3D models | Creating and showing work instructions |
| User data | Name, role, language, login | Access and personalization |
| Execution data | Time per step, confirmations, deviations | Audit trail and analytics |
| Skills data | Levels, sign-offs | Skills matrix |
| Media from capture or remote support | Video and photos | Knowledge capture and help at the machine |
What does it bring each role?
| Role | Benefit |
|---|---|
| Operator | Clear rules on what is recorded and why |
| Team leader | Access only to the data of their own team |
| Quality / HSE | Controlled, traceable records |
| HR / L&D | A basis for agreements with the works council |
How Actarion helps
- We complete your IT security questionnaire with technology partner DeepSight.
- We help you prepare information for the works council or employee representatives.
- We configure roles and permissions for the pilot.
Send us your security questionnaire
Book a free intake call and we will go through your requirements.
- Scope
- 1–2 lines, 1 process
- Duration
- 6–8 weeks
- KPIs
- lead time · first time right · errors
- Prerequisite
- baseline across several shifts
Frequently asked questions
The DeepSight platform runs in the cloud with specialised hosting providers; on request it can also be hosted in your own environment. The hosting location, including an EU location if you require one, is fixed in the contract and the data processing agreement before the start.
Actarion is the implementation partner; your data is stored on the DeepSight platform. DeepSight publishes its security documentation in the DeepSight Trust Center. We request the certificates and reports your IT department needs during the intake.
Your SOPs and instructions remain your property. Which AI services process your content, and that it may not be used to train public AI models, is set out in the data processing agreement with Actarion and DeepSight.
Technically, execution data is per user. How you use it should be agreed with employees and, where applicable, the works council.
See your own process as a digital work instruction.
In 30 minutes we look at your process, your numbers and the fastest route to a measurable pilot. No sales pitch, just concrete advice.