How NOMIC Ramp protects your data

A one-page summary for the people who approve tools like this.

What is collected

• Turnaround details (date, time, station, port type, stand, aircraft type, team size) and the observer's own notes of what they saw.
• No names, staff numbers, flight numbers or aircraft registrations. Observers are trained not to record them, and the forms don't ask for them.
• Observers are identified only by initials, inside the organisation.

Where it is kept

• On the organisation's devices: in the browser's own storage (IndexedDB) on each phone and computer.
• Online, if the organisation turns it on: in NOMIC Ramp's storage on Cloudflare (Cloudflare Pages Functions and D1), encrypted on your devices before it is sent. The storage is placed in the Oceania region (Australia); ask us if your organisation needs it elsewhere, such as the EU.

Encryption

• Each observation is encrypted on the device before it is sent, with AES-256-GCM, using a key created on the organisation's first computer with the browser's Web Crypto API.
• The key travels only inside pairing links, in the part after "#" (the URL fragment), which browsers never send to a server. It is removed from the address bar once used.
• The server stores only encrypted items, item identifiers, timestamps and SHA-256 hashes of access tokens. It cannot decrypt anything.
• All traffic uses HTTPS.

Access

• Each link is separate. The programme lead makes one link per phone, per extra computer, for NOMIC support and for managers' reports, and can cancel any of them in Set up. A cancelled link stops working straight away.
• Phone links can only send the phone's own observations. They can't read anything back from the server, and they can't change or delete what the computers hold.
• Computer links give full access to the organisation's observations, including the notes. Organisations should share them only within their programme team.
• Managers' report links open only the summary the programme team publishes: totals and links, no notes and no single observations. The summary has its own key, so a report link can't read anything else.
• NOMIC can only see an organisation's observations if the organisation chooses to give access, by sending a support link when asking for help. The organisation cancels it when the help is done.
• Disconnecting a device stops it syncing and removes the link and key from it. To shut out every old link at once, start a new storage space in Set up (your observations move across) and send new links to your team.

What the server can see

That an organisation's space exists, how many encrypted items it holds, their sizes and when they changed. It can't see the contents of any item.

The app

• A web app (HTML and JavaScript) that can be added to a phone's home screen and works offline.
• No advertising, analytics or tracking, and no third-party resources: the fonts are hosted with the site.
• The QR code library is a pinned copy inside the app (qrcode-generator, MIT licence), not loaded from elsewhere.

Backups and loss

Organisations can save a backup file and export spreadsheets at any time. These files are not encrypted, so keep them somewhere only the programme team can open. If every device and link holding the key is lost, the online copy can't be unlocked by anyone, including NOMIC. Keep backups.

Questions: [email protected]. See also privacy and terms.