Trust and data protection
Only the data needed, kept under control
Managing municipal assets involves technical documentation, operational data, work tasks and information about the people responsible. Not all data serves the same purpose, and not every staff member needs the same access.
We design SmartGovIOT so that the information required, who will work with it and which activities the system should record are defined while preparing the solution. Data protection is therefore not separate from daily work. It is part of configuring user permissions, recording activities and connecting individual systems.
Controlled access
Every user should have access appropriate to their work.
Municipal management needs an overall view, an asset manager needs information about sites, and technical staff need information for their assigned tasks. The distinction is not only about what users can see. Which data they can edit, which activities they can perform and what they can approve also matters.
Permissions are therefore configured according to roles, assigned sites and the agreed way of working. Access to one operational area should not automatically mean access to every document or the ability to change settings across the entire system.
When responsibilities change or a staff member leaves, permissions need to be adjusted to reflect current responsibility. Preparing a deployment therefore also includes identifying the person who will approve the granting and changing of access.
Illustrative example: A technician needs documentation and intervention history for the equipment they are to inspect. Completing that task does not require changing colleagues' permissions or viewing unrelated documents for other sites.
Traceability
For an important change, it should be clear what happened and what to build on.
Operational records should also help when you return to an event after several weeks or another staff member takes it over. For significant changes and completed activities, it is therefore important to retain the time, related asset, result and, depending on the record, the person or system from which the information originated.
The history can explain when a fault was reported, to whom it was assigned, what findings were added and why it was closed. For consumption data, it also helps distinguish an automatic measurement, an imported meter reading and a manually added record.
Traceability is not about recording every staff activity for its own sake. The scope of the history should reflect operational needs and help with work handovers, investigating discrepancies and checking results.
Illustrative example: When a pump has a recurring fault, the asset manager needs to establish what changed during the last repair and what recommendation the technician recorded. They can then build on specific information, not merely the fact that the previous task was marked as complete.
Data minimisation
Collect what serves a clear purpose, not everything that is technically available.
Clearer operations do not automatically result from moving as much information as possible into a system. For every set of records or integration, it is necessary to identify which data is needed for the task and which would only increase the volume or sensitivity of the information processed.
Maintenance may require knowing the responsible person and their work contact details. There is no reason, however, to add personal information unrelated to the intervention. Similarly, a photograph of equipment should document its condition, not unnecessarily capture people, nearby documents or access credentials.
We apply the same principle when connecting technologies. If availability or fault status is sufficient for monitoring operations, the integration design should focus on that scope. Transferring additional content must have a separately defined purpose and conditions.
Illustrative example: Investigating a camera device outage may require information about its technical status and last communication. SmartGovIOT does not need to transmit or display camera footage for this purpose.
Security without unnecessary complexity
Clear rules that support work and maintain control.
Staff should understand the data they work with, what they can do and when a decision from another authorised person is required. Security rules should therefore be part of an understandable workflow, not an unclear obstacle to work around.
SmartGovIOT is not intended to replace every specialist municipal system or take over all of their functions. Connections are designed only to the extent needed, while preserving the original system's restrictions. Displaying a technical status, for example, does not automatically grant permission to control equipment or change its configuration.
Understandability also includes information about data quality. If a source stops communicating, the last known value should not be presented as a new measurement. Users need to recognise whether they are working with current data, a historical record or information that needs to be checked.
With planned AI assistance too, important decisions, approvals and active changes remain under the control of an authorised person. A proposed next step is not the same as permission to carry out an intervention.
Conditions tailored to the particular deployment
Before introducing a solution, we clarify the scope of data, user roles, systems involved and responsibilities. Conditions for operation, support, retention and handover of data are defined according to the particular service and agreed scope.
The municipality should therefore know which information enters the solution, what it is used for and who can work with it. A separate page explains these principles in more detail, including data sources, access and the boundaries of individual integrations.
Trust rests on understandable rules, a proportionate scope and the ability to verify important activities.
Trust and data protection