Lisa. Live demoDemo

Privacy

Privacy.

Lisa stores the minimum required to run facilities work and prove it.

Working draft for buyers evaluating a pilot. Have counsel review before a production contract.

The short version

Lisa stores the minimum required to run facilities work and prove it. We do not sell data. We do not train models on customer data. Production data lives in a dedicated U.S. instance used by one customer.

What we collect

  • Account identity via your SSO (name, email, role). Pilots may use named accounts with PINs.
  • Work orders, assets, barcodes — the operational record your crew creates.
  • Photos of work, trucks and pallets — never the papers inside boxes.
  • An audit log of actions: who did what, when, server-stamped.
  • Crew location only during an active shift session, and only from a signed-in crew device.

What we do not collect

  • The contents of records boxes. Lisa stores where the box sits, not what is in the folder.
  • Off-shift location. Location capture requires an open crew session and is deleted at sign-out.
  • Employee request-portal accounts. The portal has no login; a request carries only what the employee types.

How we use it

To operate the system, enforce photo gates and custody rules, produce the exports and reports you ask for, and for security and abuse prevention. Nothing else.

Who we share it with

Named subprocessors, listed to you at go-live (U.S. application host, dedicated U.S. database, U.S. object storage for photos, transactional email). No sale. No advertising. Support access to your instance is break-glass and logged.

Where it lives

United States only — servers, backups, and support.

How long we keep it

Your records policy governs retention of work orders, photos and audit history; legal holds block deletion. Crew location is deleted at sign-out and never retained. On exit: full export, then certified deletion on a stated timeline.

Your rights

Export anytime in CSV/JSON. Deletion on a stated timeline. A Data Processing Addendum on request — see the DPA summary.

Certifications

Lisa is not SOC 2 certified today. If a Type II report is required to award, the engagement starts in year one as a contract deliverable. We do not claim GDPR representation or EU entities.

Contact

mattlincoln@monalisamoving.com