Workers · Data · Security
Trust is designed.
Made for the crew who wear it and the teams who guard your data.
Worker Charter
Built with the crew, not on them.
The people who build America deserve tools that respect them.
- A light shows whenever PIN is tracking.
- Workers can pause tracking.
- No facial or emotion recognition.
- No productivity scores or rankings.
- AI notes are marked as AI.
- Workers can add context.
- People, not AI, decide about people.
- Only named roles can open video. Every view is logged.
- Records expire on the agreed schedule.
Human review
People decide. AI only advises.
- Seen
- Lock on valve V‑9, no name on the tag
- AI note
- Isolation step may be incomplete.
- Worker note
- Name added to the tag and checked, 09:14
- Signed
- Safety lead, 09:20
Data
Video can stay on your site.
Built to keep tracking offline and sync later.
Security
Built for your security review.
Design targets for the pilot build.
Encrypted
In transit and at rest.
Role-based access
Each role sees only its part.
Audit logs
Every sensitive view is logged.
Tenant separation
Each customer’s data is kept apart.
What’s in. What’s next.
- Capture light and human review
- Designed in
- Encryption, access control, audit logs
- Designed in
- Single sign-on and device management
- Pending
- Independent audit (SOC 2 Type II)
- Pending
- Certification (ISO/IEC 27001)
- Pending
| Role | View | Time | Logged |
|---|---|---|---|
| Safety lead | Near-miss record | 09:16 | ✓ Logged |
| Site lead | Lockout check | 07:44 | ✓ Logged |
| Worker | Own shift | 17:02 | ✓ Logged |
| PIN support | No access unless you grant it | — | No access |
Every device, from box to wipe.
Receive
Provision
Configure
Assign
Authenticate
Operate
Monitor
Update
Reassign
Revoke
Wipe
Designed so a lost device can be revoked and wiped.
Questions
Straight answers.
Who can see the footage?
Only the roles your organization names, such as a site safety lead. Raw video opens only for those roles, and every view is logged. The worker who wore the glasses can see records from their shift and add context. PIN staff can’t see your footage unless you grant access for support.
Can footage be used for discipline?
PIN is built for safety and proof of work, not to watch people. Its AI never decides anything about a worker. Before any decision that affects someone’s job, a named person reviews the full record, including the worker’s own note.
Does it track on breaks?
PIN is for work. The light shows whenever PIN is tracking, and the wearer can pause at any time. Before a pilot, each site sets where tracking stays off, such as restrooms and break areas.
Does PIN capture people who aren’t at work?
PIN is built for the work. The light shows whenever it is tracking, there is no facial recognition, and each site sets where tracking stays off.
How long are records kept?
Your organization sets how long each type of record is kept, and agrees it before the pilot. When that time is up, the record is deleted. A record under legal hold is kept until the hold ends.
Can a public agency meet its records rules?
Your agency sets retention and access. We map both with your records officer before the pilot.
What goes to the cloud?
Only what you allow. The AI models are designed to run on the machine at your site, so video, audio, context and records can stay there. Cloud routing for heavier AI reasoning stays off until you turn it on.
Does PIN replace safety programs?
No. PIN is built to support your people and the programs you already run, such as training, inspections and hearing protection. It doesn’t replace worker judgment, your site’s safety lead, or any program the law requires.
Security pack
Get the security pack.
Architecture, data flow and controls.
Plan your pilot with the crew.
Worker voice from day one, measured together.