Basking uses WiFi and LAN integrations to estimate occupancy in the office. What data points precisely are collected?
Basking uses WiFi and LAN integrations to estimate occupancy in the office. It does so while complying with the strictest data privacy regulations and concepts. One of the top questions while considering Basking is about the specific data that is collected.
The following article gives a highlight of the data structure and the key concepts around data privacy.
Principle: We collect only what we need
One of the key principles around data privacy and IT security is always to limit access to unnecessary data. Basking takes this concept at heart, and processes only required data, leaving everything else outside of the scope of work.
In order to ensure this principle, Basking has
- built a product that does not require additional, non-essential information
- implemented policies and controls to ensure compliance
- been certified according to the SOC 2 Type 2 standard
Principle: Basking is "receiving" data, your IT has full control over the data flow
Another key principle is that the data collected by Basking, both for WiFi and LAN, is governed by your IT. Depending on the integration, the technicalities of this concept might be different, but all our integrations have one thing in common:
- Basking is receiving data, with access to your corporate network
- Your IT configures, maintains, and is generally responsible for the data integration to Basking.
Data structure
Here's a list of data points we process with WiFi and LAN as a data source:
- MAC address of connected devices. Note that this MAC address is never stored or processed in its original form. Basking uses an irreversible hashing algorithm to hide the original MAC address before processing.
- Timestamp when the device was visible (observation) by the WiFi/ LAN network
- The estimated location of the observation in relation to the hierarchy of the network (company, campus, building, floor, area)
- WiFi specific: Location in relation to the floor plan (geo coordinates or floorplan coordinates)
- LAN specific: location granularity in relation to the floor plan up to desk level granularity if enabled by the customer. Other granularity levels are room, areas, wings, floor and site.
- Other non-PII data related to observations, like
- Operating system as estimated by the network management system
- Device manufacturer as estimated by the network management system