Blue Digital Safe
Blue Digital Safe is more than storage cloud, it’s a Digital Safe, ensuring privacy, based on a green cloud, low power consumption, protecting our earth environment
Privacy by Design and Privacy engineering principles guide in all phases:
- Operations
- Architecture and Design
For obvious security reasons, we will not lift the veil on how we did
Architecture and design
- Read only right for event participants, auditors and legal authorized persons
- User cannot deleted an event, only secure process can delete it with audit and limited recovery time
- Apply Traceability principles, as much as possible
- Implement some mecanisms used in blockchain, to ensure integrity. Blockchain technology is not suitable due to
- GDPR (art 17) stipulates the right to be forgotten block chain does not permit to delete records
- In blockchain access rights can’t be modifed that do not permit the Record Management freeze record and do not comply with the flexibility of the job holder in an organiozation
- Container management for operating officer
- Implement many features of the ISO 15489 Record Management regulations and Moreq2
- Mobile Rights: because in smartphone and tablets, information might becomes mobile,
- Information transport: the use of HTTPS encryption is a straight forward solution, nevertheless Blue strives to have meaningless message block during synchronization, in using methods as
- pseudos
- data/time hashing
- sign message
- High availability architecture,
- Self-regenerating capabilities
- Containerization of events
Operations
Database management and operators
To prevent information leak, the goal was to design the database in such a way that the operators can’t look at the informationand are not tempted to commercialize them.
BlueSafe operators manage your Digital Safe. Their rights are limited to just manage the event containers in viewing only its metadata.
They cannot
- open events and have access to its content, event are sealed envelopes
- delete events
- create events
- view user’s information
- change your password
High availability
Archived event are available at any time.
The infrastructure is build in a high availibility, with redundant components (duplicated or even more).and offer an availability of 99.9%. that means a downtime below 1 hour per year.
Safe location
The Blue Digital Safe is located in Switzerland, One of the only 3 european country to provide a high legal framework for privacy,
Database and its failover baxkups remains in Switzerland
Record management
Legal Archiving
BlueSafe is a true record management solution to manage mobile information. Among the Privacy by design requirements, Blue Digital Safe implements some features of the ISO 15489 Record Management, as:
- Secure agent driven deletion
- Retention time, cut-off date
- Freeze document collection
- Audit trail
- Event and its structured content
- Metadata
- Content, contributions, comments opinion, context
- List of participants and their respective rights
- Life cycles
Mobile rights
Corporate documents and event templates
BlueDigital Safe let the authorized person (Legal, R&D and Operational departments) to manage the policy of corporate documents and event templates
In the record management, this policy specifies
- the mobile rights of document
- its behavior when it becomes mobile
- relative hazardous zone
- absolute geographical zone