Product Privacy

Privacy is a fundamental human right that allows individuals to maintain control over collecting and processing their personal information. In today's increasingly digital world, ensuring personal data is handled transparently, securely, and with the right measures has become more critical than ever. 

Globally, privacy rights are increasingly being protected and regulated by laws. For instance, the European Union enforces the General Data Protection Regulation (GDPR), which sets stringent guidelines on the collection, processing, and handling of personal data. Similarly, in the United States, California leads the way with the California Consumer Privacy Act (CCPA) that grants consumers greater control over their personal information. These regulations reflect the growing recognition of privacy as a key aspect of individual freedom and security. 

At Milestone, ensuring that you can deploy and use our products and services in full compliance with privacy regulations and laws while respecting individuals' rights to privacy is a top priority.  

Our commitment to privacy goes beyond merely adhering to regional laws - we have established a clear philosophy centered on Corporate Social Responsibility and Responsible Technology.  

Furthermore, Milestone is proud to be a co-author of the Copenhagen Letter, a technology declaration that pushes for an open and honest public conversation about the power of technology and how it should enhance the quality of life.

Building on Milestone's commitment to respecting human rights with respect to privacy, our Security Development Lifecycle (SDL) includes the principle of privacy by design. This principle ensures that privacy and handling of personal data are integral considerations from the very beginning of the design phase of our products and services. 

With privacy by design, we focus on restricting the collecting, processing and storage of personal information to only what is essential for delivering core functionality. Additionally, we ensure that we enable our customers to control how personal data within their installations is managed, anonymized, pseudonymized and accessed - giving them the tools to uphold privacy laws and regulations using our products and services in their organization. 

The privacy by design principle is also integral to the Milestone services your organization relies on. When using Milestone's cloud-hosted services, privacy considerations become even more critical as personal data is processed through Milestone-controlled infrastructure. In line with the privacy-by-design approach, we consistently assess how your data is processed and stored, ensuring robust security measures are in place.  
 
These measures guarantee that your data remains private and accessible only to your organization, preventing access by others and even making it inaccessible by Milestone. 

Read more about the Security Development Lifecycle 

Privacy by default is another key principle in our SDL, building on the “secure by default” foundation. Privacy cannot be achieved without ensuring data is securely managed, both in transit and at rest. 

With Milestone's products inherently designed to be secure by default, privacy by default extends this to safeguarding personal data through permission controls, anonymization, and pseudonymized data capabilities. This ensures that users can only access, view, and possibly export personal data after explicitly being granted permissions by system administrators. 

Read more about the Security Development Lifecycle