跳到主要内容

GDPR & Compliance

Data protection and regulatory compliance in Ever Gauzy.

GDPR Requirements​

RequirementGauzy Implementation
Right to accessEmployee data export
Right to erasureAccount deletion, data purge
Data minimizationConfigurable data collection
Consent managementScreenshot consent, tracking
Data portabilityJSON/CSV export
Breach notificationAudit logging, alerts

Data Subject Rights​

Right to Access (Article 15)​

Employees can export their data:

  1. Go to Profile → Privacy → Export My Data
  2. Downloads JSON with all personal data

Right to Erasure (Article 17)​

Admin can delete employee data:

  1. Go to Employees → select employee
  2. Click Delete → Permanently Delete All Data
  3. Removes: user account, time logs, screenshots, activities

Data Collection Settings​

Data TypeDefaultConfigurable
ScreenshotsEnabled✅ Per org
Activity levelsEnabled✅ Per org
App/URL trackingEnabled✅ Per org
Mouse/keyboardEnabled✅ Per org
GPS locationDisabled✅ Per org

Data Retention​

Configure automatic data cleanup:

# Auto-delete screenshots older than N days
SCREENSHOT_RETENTION_DAYS=90

# Auto-delete activity logs older than N days
ACTIVITY_RETENTION_DAYS=365

Audit Trail​

All data access and modifications are logged. See Audit Logging.