Legal & Compliance
Compliance & Privacy
Version 1.0 · 2026-06-22 · Classification: Public
1. System Overview
TapAlert is an operational safety alert system for warehouse and distribution centre environments. A hard-wired button press broadcasts an instant vibration alert — with zone and incident type — to all Samsung Galaxy Watch 7 wristbands on the floor. No worker identity, login, or enrollment is required at any point.
TapAlert covers four incident categories: equipment failure (conveyor jams, forklift breakdown), spill response (hazmat, liquids), medical assist (injury, fatigue), and security (unauthorized access). Each alert is logged with zone, timestamp, and resolution time — giving operations teams a full incident history exportable as CSV.
TapAlert acts as a technical safety aid helping employers fulfill their legal obligations under the Swedish Work Environment Act (Arbetsmiljölagen 1977:1160) and related AFS regulations, ensuring workers can instantly signal an operational emergency — equipment failure, spill, medical assist, or security breach — regardless of noise level, distance, or available communication equipment.
Architecture
- Frontend: React + TypeScript, served via Firebase Hosting (CDN)
- Backend: Google Firebase Cloud Functions (Gen 2) + Firestore
- Push delivery: Firebase Cloud Messaging (FCM)
- Alert trigger: Shelly i4 Gen3 — hard-wired industrial button, HTTP webhook to Firebase. Incident types: Equipment Failure, Spill, Medical Assist, Security.
- Wristband: Samsung Galaxy Watch 7 — standalone WiFi, managed via Samsung Knox MDM
- Hosting region: europe-north1 (Finland)
Alert flow
- Worker presses hard-wired button (Shelly i4 Gen3)
- Shelly sends HTTP webhook to Firebase Cloud Function
- Cloud Function pushes FCM notification to all registered watches
- Every Galaxy Watch on the floor vibrates and displays the alert (<1 second end-to-end)
2. Privacy & Data Protection
Key finding: TapAlert processes no personal data about workers
Wristbands are fully anonymous. No worker name, phone number, employee ID, or biometric is stored anywhere in the TapAlert system. Workers pick up any available wristband at the start of their shift and return it at the end — no pairing, no login, no enrollment.
Because no personal data about individual workers is processed, TapAlert is not a data processor under GDPR for worker data. A data processing agreement for worker data is therefore not applicable.
Purpose limitation. TapAlert is a safety alert system only. It is not a time-and-attendance system, does not track worker location or movement, and performs no profiling or automated decision-making about individuals.
Legal basis for contact/demo form data. When a potential customer submits a demo request via tapalert.se, TapAlert (Techzola) processes contact information for business communication purposes under legitimate interest (GDPR Art. 6.1(f)).
Data processing location. All data processing takes place within EU/EES:
- Firebase Firestore & Cloud Functions: europe-north1 (Finland)
- Firebase Hosting: EU CDN nodes
- Samsung Knox Manage: EU data residency
No personal data is transferred outside EU/EES. Standard Contractual Clauses (SCCs) are not required.
Privacy by Design & Data Minimization (GDPR Art. 25). TapAlert is architected from the ground up to collect the minimum data necessary for the system to function. Specifically:
- Wristbands hold only an FCM device token — a random string with no link to any worker identity
- Alert logs record which zone triggered and which device tokens received the push — never which person was wearing a specific watch
- No names, employee IDs, biometrics, or locations are ever collected, stored, or transmitted
This architecture significantly reduces or eliminates the need for customers to conduct a Data Protection Impact Assessment (DPIA) for TapAlert, since no personal data about workers is involved. Customers' own Data Protection Officers (DPOs) can verify this directly from the sub-processor table and data inventory below.
3. Sub-processors
| Provider | Service | Data processed | Location | DPA |
|---|---|---|---|---|
| Google Firebase (Google Cloud) | Cloud Functions, Firestore, Hosting, FCM | Alert event logs (timestamps, device IDs — no personal data); demo form contact data | EU — europe-north1, Finland | Google Cloud DPA in place |
| Samsung Knox Manage | Mobile Device Management (MDM) for watch fleet | Watch device serial numbers, app configuration, firmware version — no worker identity | EU data residency | Samsung Knox Enterprise Agreement |
| Shelly Cloud (Allterco Robotics) | Webhook trigger from alert buttons | Device ID and command only — no personal data | EU (shelly-21-eu.shelly.cloud) | No personal data transmitted |
| SendGrid (Twilio) | Email notification for demo form submissions | Contact name and email (one-time notification to TapAlert) | EU | SendGrid DPA in place |
Shelly Cloud and Samsung Knox receive no personal data — only device identifiers and operational commands. They are listed here for completeness of data flows.
4. Data Inventory & Processing
| Data type | Description | Personal data? | Controller/Processor |
|---|---|---|---|
| Alert event log | Timestamp, zone (button ID), list of watch device IDs that received the alert | No — wristbands are shared and not assigned to individuals; a device ID cannot, with reasonable effort, be linked to a natural person by TapAlert or the customer (cf. CJEU Breyer) | TapAlert (controller) |
| Watch health metrics | Battery level, WiFi connectivity, app version — per device ID | No | TapAlert (controller) |
| Watch device enrollment | Device serial numbers enrolled in Knox MDM, app configuration | No — anonymous, not linked to worker identity | TapAlert (controller), Samsung Knox (processor) |
| Demo request form | Company name, contact name, email, phone, warehouse size | Yes — contact person's business details | TapAlert (controller) |
5. Data Retention & Deletion
| Data type | Retention period | Deletion method |
|---|---|---|
| Alert event logs | 2 years | Automatic — Firestore TTL policy (aligned with SAM documentation requirements) |
| Watch health metrics | 90 days | Automatic — Firestore TTL policy |
| Knox device enrollment | Duration of service agreement + 30 days | Manual removal from Knox console on contract termination |
| Demo/contact form data | 24 months | Manual deletion on request or at expiry |
Retention periods are configured in the system and enforced automatically. On contract termination, all customer-related data (alert logs, device enrollment) is deleted within 30 days.
Data portability & exit. Customers own their alert history and device configuration. Prior to contract termination, alert log data can be exported in JSON or CSV format on request. No vendor lock-in — the underlying hardware (Shelly buttons, Samsung watches) remains the customer's property throughout the agreement.
6. Security Measures
Data in transit. All communication uses HTTPS/TLS 1.2+. The Shelly → Firebase webhook uses a pre-shared secret for request authentication. FCM push delivery uses Google's encrypted transport.
Data at rest. Firestore data is encrypted at rest by Google (AES-256, Google-managed keys). No sensitive personal data is stored — the only stored data is alert timestamps and anonymous device IDs.
Device security — Samsung Knox. All Galaxy Watch 7 units are managed under Samsung Knox Manage, the same MDM platform used by government and military organisations. Knox provides:
- Centralised fleet management — no on-site IT required
- Remote device lock, wipe, and unenrollment
- App installation restricted to TapAlert-approved apps only
- OTA firmware and app updates, centrally controlled
- Device attestation and tamper detection
Firebase security rules. Firestore rules deny all direct client access. All reads and writes go through authenticated Cloud Functions only.
Alert button hardware. Shelly i4 Gen3 buttons run on hard-wired 12–24V DC power (no battery failure risk). Firmware is updated centrally via Shelly Cloud. No personal data passes through the button hardware.
Access control. The TapAlert admin interface (Firebase Console + Knox portal) is accessible only to authorised TapAlert personnel. Customer access to alert history is available on request via a read-only view.
Hardware certifications. All TapAlert hardware components carry EU CE marking and comply with applicable EU directives and their Swedish implementations:
- Shelly i4 Gen3 — CE marked; complies with RED (Radio Equipment Directive 2014/53/EU, implemented as Radioutrustningslagen 2016:392), LVD (2014/35/EU), and EMC (2014/30/EU, implemented as Lagen 1992:1512 om elektromagnetisk kompatibilitet). Rated for continuous 12–24V DC operation. IP20. No interference with other industrial equipment.
- Samsung Galaxy Watch 7 — CE marked; complies with RED (2014/53/EU). Wi-Fi 802.11 a/b/g/n/ac, BT 5.3. SAR certified within EU limits.
CE declarations of conformity are available from the respective manufacturers (Allterco Robotics / Samsung Electronics) upon request.
7. Service Level & Operations
| Component | SLA | Notes |
|---|---|---|
| Firebase Cloud Functions (Gen 2) | 99.9% monthly uptime | Google Firebase SLA — europe-north1 |
| Firestore | 99.999% monthly uptime | Google Firestore SLA |
| Firebase Hosting / FCM | 99.95% monthly uptime | Google Firebase SLA |
| Alert delivery time | <1 second (typical) | Subject to warehouse WiFi quality |
| Hardware replacement | Next business day (Sweden) | Wristband or button unit replacement |
| Support response | 4 business hours (email/phone) | Critical issues: 1 business hour |
TapAlert does not operate a persistent server. All backend logic runs as serverless Firebase Cloud Functions — there is no VM or container to maintain, patch, or restart. Google manages all infrastructure security, patching, and availability for the cloud components.
Scope of service — important limitation. TapAlert is a supplementary alert system and does not replace statutory safety installations (fire alarms, emergency lighting, evacuation systems) required under building codes or insurance conditions. Alert delivery depends on warehouse WiFi coverage. TapAlert's liability is limited to the service subscription value in accordance with the service agreement.
8. Work Environment Law (Sweden)
TapAlert is designed to be an integrated part of customers' systematic work environment management (SAM). For operations where staff face a risk of violence or threats, a fast and reliable alert is not just a safety measure — it is often a legal requirement.
Applicable regulations (Arbetsmiljöverket)
- Arbetsmiljölagen (1977:1160)Employers bear primary responsibility for preventing ill-health and accidents. TapAlert supports this duty by providing an immediate technical response channel for dangerous situations.
- AFS 1993:2 — Våld och hot i arbetsmiljön, §8Workplaces where there is a risk of violence or threats must be equipped with technical means to quickly summon help. TapAlert's alert buttons and vibrating wristbands fulfill this requirement — critically, alerts reach colleagues immediately and without the perpetrator necessarily noticing. The same system simultaneously covers equipment failure, spill, and medical emergencies — one installation satisfying multiple AFS requirements.
- AFS 1982:3 — EnsamarbeteLone workers must have rapid access to help in an emergency. TapAlert functions as a safety link for staff working without direct proximity to colleagues — a single button press broadcasts an alert to the entire floor.
- AFS 2001:1 — Systematiskt arbetsmiljöarbete (SAM)Employers must document risk assessments and safety measures. TapAlert automatically logs every incident with zone, timestamp, incident type, and response time. Logs are exportable as CSV — ready to reference in SAM documentation and during Arbetsmiljöverket inspections without any manual record-keeping.
What this means for your organisation
By implementing TapAlert, customers can document in their work environment plan (arbetsmiljöplan) that they have taken the technical safety measures required under Swedish law to protect staff in exposed environments. This applies in particular to retail, warehousing, healthcare, and any setting with lone work or elevated risk of threats.
Consult your work environment coordinator (skyddsombud) and safety committee to confirm applicability for your specific operations.
TapAlert does not replace organisational safety measures (policies, training, staffing) required under Swedish law — it is a technical complement that enables faster response when an incident occurs.
9. DPA & Contact
Since TapAlert processes no personal data about warehouse workers, a Data Processing Agreement (personuppgiftsbiträdesavtal) for worker data is not required or applicable.
For the demo/contact form data where TapAlert acts as data controller: data subjects may request access, rectification, or deletion by contacting us at the address below.
For enterprise deployments where a DPA covering system operation data (alert logs, device metrics) is required for compliance purposes, TapAlert can provide a DPA on request.
Contact
This document is reviewed and updated with each material change to the TapAlert system. Current version: 1.0 (2026-06-22).