SOBEREYE / OPTOVERA PLATFORM

Privacy & Trust

Designed for safety. Built for privacy. Trusted for operations.

OPTOVERA helps organizations manage fatigue-related risk in operational environments by providing objective, time-of-assessment indicators that support proactive safety decisions. We built the platform to strengthen safety programs, while protecting privacy, preserving human oversight, and respecting applicable regulations.

What OPTOVERA Is—and What It Isn’t

OPTOVERA is a workforce readiness and safety decision-support platform.

It is not:

a medical device
a diagnostic tool

OPTOVERA does not diagnose medical conditions or identify the cause of reduced alertness. Results are informational and intended to be reviewed by qualified personnel as part of broader safety processes.

How OPTOVERA Works

One component of the platform, OPTOVERA Scan, analyzes characteristics of the Pupillary Light Reflex (PLR), a natural physiological response in which the pupil reacts to light.

Scientific research in neuroscience, human factors, and safety-critical performance contexts has shown that changes in pupil dynamics may be associated with variations in alertness, fatigue, and cognitive workload.

OPTOVERA applies this established signal in a non-diagnostic, operational safety context, as one of several inputs used to assess readiness.

Privacy by Design

Privacy and data minimization are core principles of OPTOVERA.

We intentionally limit the data we process, including:

No direct personal identifiers such as names, government IDs, contact details, or payroll data
Pseudonymous user identifiers managed by the customer
No independent identity registries of workers are maintained by SOBEREYE

Biometric Use: Purpose-Bound and Restricted

Where biometric data is used, it is only for one-to-one association within the customer’s environment, linking a readiness measurement to a previously registered user.

We do not use biometric data for:

surveillance or tracking
profiling
group identification or database searches
law enforcement or public identification purposes

Biometric-derived features (such as pupil response metrics) are used only within operational readiness and safety workflows.

Transparent Roles and Accountability

OPTOVERA is deployed exclusively in a business-to-business (B2B) context.

Customer organizations act as Data Controllers and determine how the platform is configured and used.
SOBEREYE acts solely as a Data Processor, processing data only on documented customer instructions.

Customers retain responsibility for interpreting outputs, making safety decisions, and taking any employment-related actions. OPTOVERA does not make decisions on behalf of employers.

No Marketing Use. No Automated “High-Impact” Decisions

OPTOVERA data is not used for marketing, advertising, or unrelated analytics.

The platform does not make automated decisions that produce legal or similarly significant effects. Human oversight remains central to responsible use.

Security You Can Trust

SOBEREYE operates a comprehensive Information Security Management System (ISMS) aligned with ISO/IEC 27001 and certified under that standard.

Our security program includes, among other measures:

encryption in transit and at rest
role-based access controls
environment segregation
audit logging and monitoring
internal security policies and ongoing training

Data retention periods are defined by the customer, and data is securely deleted or anonymized when no longer needed. A dedicated Data Protection Officer (DPO) oversees privacy compliance and supports regulatory and stakeholder inquiries.

In Summary

OPTOVERA supports safer operations by addressing fatigue-related risk—while minimizing personal data use, restricting biometric processing to narrow purposes, and maintaining strong security and governance.