Data governance and IT security

SiteHive provides construction environmental monitoring (noise, dust, vibration and weather) as a hosted service. This page summarises how your monitoring data is stored, secured and governed, who can see it, what the devices record, and how all of that applies when devices are hired rather than owned. It is written for the people who ask these questions on a project: IT, procurement and the environmental lead.

Where your data is stored and hosted

• SiteHive runs as infrastructure-as-a-service on Amazon Web Services (AWS), hosted entirely in the AWS Sydney region across three Availability Zones.

• No data is stored on the devices or on SiteHive's own infrastructure, and nothing goes offshore: all data stays within Australia.

• All traffic is encrypted in transit (TLS) and encrypted at rest.

• SiteHive follows the AWS Well-Architected Framework and is working toward ISO 27001 certification.

Photos and audio clips

• Devices capture a still image and a 6-second audio clip, used only to help identify the source of an event (for example, a truck reversing rather than background traffic).

• This is not continuous audio or video surveillance. There is no live feed, and a capture only fires when a threshold is exceeded.

• For noise, only the loudest event in any 15-minute period is captured by default.

• Captured media is encrypted and stored in the same access-controlled AWS environment as all other monitoring data.

• Image capture and audio capture can each be switched on or off independently in SiteHive Enviro, so a project controls whether that media is collected at all. See Set up media triggers and Enhanced media: photos, audio and video from your devices.
  

Who can see your data

• Authentication is managed through Auth0, with role-based access control enforced per site and project on a least-privilege basis.

• Access to a hired device's data is governed identically to an owned device: control sits at the account and site level, not the hardware.

• You manage who has access to each site yourself. See Add and manage users.

Privacy

• SiteHive aligns with the Australian Privacy Principles under the Privacy Act 1988.

• The only personal data typically collected is user login email addresses. No personally identifiable information is embedded in the environmental measurement data itself.

• The platform is built around collecting no more personal data than is needed to operate it.

Data retention, backups and the hire model

• Data is retained for a minimum of 5 years, can be downloaded at any time (see Export a CSV report), and is destroyed on request at the end of a contract.

• Backups run on an hourly, daily and monthly cycle.

• Hiring devices rather than owning them changes none of the above. Data governance sits entirely with SiteHive's cloud platform, not the physical hardware.

ℹ️ Need this as a document for a tender, an IT review or a security questionnaire? Your Regional Success Manager can prepare a copy for your project.

What's next

Add and manage users (roles and access, site by site)

Set up media triggers (turn photo and audio capture on or off, and set the level)

Maintaining your site (the routine this page sits beside)