Platform Privacy Policy

The Ability Platform has some built-in services and functionality that is designed to keep your data protected. The cyber security team at ABB has crafted a series of documents that cover the use, data privacy, and platform privacy policies users can expect to ensure they are protected when they build solutions on the platform.

Please reference the ABB Ability™ website for the ABB Ability™ Terms and Conditions that cover these various policies.

Collecting Personal Data

In the Ability Platform all data in transit and at rest is encrypted, additionally all data is strictly access controlled authenticating both applications and users and providing a fine grained authorization mechanism via the region API and/or the admin portal

Lastly, the Ability Platform itself does not store personal data as it relies on user information on federated identity management systems where it only uses the authentication token, for logging and authorization information it refers to the ID provided by the token as this is considered a pseudonym for the user. With these controls in place the platform can store confidential information of any sort including most personal data.

However ABB recommends the product owners and developers who build solutions do not collect any personal data if not needed in their solutions, in cases where it is needed the data should be properly tagged using the information model so it can easily be identified and deleted when necessary.

Specifically, incorporating privacy using the info model is learned as part of the onboarding process together with guidance on how to register the solution in the “Records of Processing” database. If you would like to learn this process outside of an onboarding session please contact your CST representative or visit the security section of the ADP.

Collecting personal data is a specific decision made by each team developing a solution during the design phase. If a team's solution built on the Ability Platform is collecting any specific personal data other than user email and name then it is required that the team contact either Bart de Wijs or Nicolas Grunder