AIDI · CIDMA · UA
Data security
Security, privacy and data control considered from the design of each collaboration.
At AIDI, data security is an engineering requirement, not a final add-on. Industrial projects frequently involve operational data, proprietary processes, connected equipment and sensitive technical knowledge.
Working principles
- Data minimisation and purpose: use only the data needed for the agreed technical objective.
- Access control: separate users, services and environments according to project needs.
- Local and edge processing when appropriate: reduce exposure and latency by keeping processing close to the source when justified by the architecture.
- Isolated, containerised environments: favour reproducible, auditable components with clear technical boundaries.
- Controlled transfer and integration: define APIs, credentials, channels and logging according to risk and industrial context.
- Agreed retention and deletion: align the data lifecycle with project, partner and University of Aveiro requirements.
- Confidentiality and intellectual property: integrate security requirements with applicable UA procedures and the agreements defined for each collaboration.
Where personal data is involved, applicable data-protection requirements, including the GDPR, are considered together with the relevant institutional procedures. Specific measures depend on the risk, infrastructure and requirements of each project.