Security and data

Your site data, protected and yours.

Clock-ins, reports, photos: this is business data and your employees’ personal data. Here is, point by point, how Ajura Chantier handles it.

Roles and rights

  • management and administration, with full rights;
  • branch manager;
  • project manager;
  • site manager;
  • employee.

Everyone sees only their own sites

An employee never reads reports. No amount or cost ever reaches a field phone.

Personal login codes

Login code assigned by the application to each employee (S0001, S0002…), never reassigned.

  • On the web: code and password.
  • On the phone: personal PIN, fingerprint or face unlock, automatic locking.

Enrolled phones

  • enrolment with a one-time code handed over in person;
  • list of each employee’s devices;
  • immediate revocation;
  • alert if a device is reported compromised by its manufacturer.

Sessions closed on reset

Resetting a password or PIN immediately closes all of the account’s open sessions.

Audit trail

Every change keeps its author, its date, the before and the after. An issued document is never rewritten.

Protected photos and documents

  • stored in France;
  • served through temporary links;
  • visible only to those who read the report containing them.
  • Location metadata is removed from photos.

Hosted in France

Hosted by OVHcloud in France, HTTPS everywhere, database backed up every night.

Location at clock-in only

Location only at the moment of clocking in, never continuously, no coordinates kept, no photo of the employee at clock-in.

GDPR: who does what

The customer is the data controller; InstaClaim AI is its processor, under contract (GDPR Art. 28). An information notice is provided for employees.

Contracted AI services

The AI services used are under contract and listed in the privacy policy. They never receive clock-in data.

Coming soon

Your data, retrievable

Full export of your data.

Coming soon

Employee rights

Employee rights supported by the tool: export, rectification, retention periods applied automatically.

Clock-in and privacy

Know who is on site, without tracking anyone

  • Location read only at the moment of clocking in, never continuously.

    • No coordinates kept: only “on site” or “out of zone”, and the distance to the site.

  • Employee consent collected in the app, with a clear information notice; it can be withdrawn at any time.

  • Without consent or a GPS signal, the clock-in is still recorded, marked “no location”. The site manager, project manager or office then confirms presence; the employee picks a reason from a simple list.

  • No photo of the employee when clocking in.

A question from your IT or data protection team?

Write to us: we answer your questions about security and data protection.

Write to us