Skip to main content
Data Protection

GDPR &
Data Processing

Documentation for data protection officers, procurement leads and legal teams evaluating EchoDefence.

Data Protection

GDPR & Data Processing

Documentation for data protection officers, procurement leads and legal teams.

Processing Overview

EchoDefence processes video and audio signals to extract behavioural indicators. No biometric data is retained beyond the session window. All processing occurs on UK-sovereign infrastructure via Logic Software Ltd, hosted on Microsoft Azure UK Cloud.

Legal Basis

  • Article 6(1)(e) — Public task / exercise of official authority (MoD, law enforcement, border force)
  • Article 6(1)(f) — Legitimate interests (private sector security and compliance)
  • Article 9(2)(g) — Substantial public interest (national security, counter-terrorism)

Sub-Processors

Sub-Processor Role Location Certifications
Logic Software LtdTechnical build partnerCardiff, UKISO 9001, Cyber Essentials Plus
Microsoft AzureCloud infrastructureUK South / UK WestISO 27001, SOC 2
Cavefish LtdData controllerCardiff, WalesCompany no. 15127122

Data Retention

  • Raw video/audio: not retained beyond the processing session (default)
  • Behavioural signal outputs: retained for contract period, deleted on termination
  • Aggregated analytical reports: retained per client data schedule
  • Right to erasure honoured within 30 days of request

DPIA Support

We provide a completed Data Protection Impact Assessment template and technical annex for deployments requiring DPIA under Article 35 UK GDPR. Available to qualified procurement leads on request.

Security Clearance Compatibility

EchoDefence has been assessed for deployment in SCIF-adjacent environments. Air-gapped deployment options are available for classified environments.

Request Documentation

For DPIA templates, Data Processing Agreements, and security architecture documentation:

Contact Procurement Team

How do I procure EchoDepth for a UK defence organisation?