NFC Wayfinding – Security & Data Protection Summary

Our NFC-enabled wayfinding signs are designed with security and privacy in mind.
Below is a high-level overview of how we protect users and your organisation.

Security Architecture

• Encrypted delivery: All web content reached from the tag is served over HTTPS (TLS 1.2/1.3), so communication between the user’s device and your servers is fully encrypted.
• Tamper-resistant tags: We supply NFC tags that can be permanently locked or, for higher security, cryptographically protected (e.g., AES-enabled NTAG424 DNA). Once locked or secured, the stored URL cannot be altered by an attacker.
• No personal data on tags: Tags contain only a non-identifying URL or ID; no personally identifiable information (PII) is stored on the chip.

Privacy & Compliance

• GDPR-ready: Because tags store no PII and your backend can operate without collecting personal data, the solution supports GDPR compliance. If analytics or optional user data are collected, we implement encryption-at-rest, strict access controls, and clear privacy notices.
• Industry standards: Please check your hosting partners maintain ISO/IEC 27001-certified environments and undergo regular penetration testing.

Risk Mitigation

• Anti-cloning safeguards: Each tag has a unique hardware ID. Our system verifies this ID (and, for crypto tags, a cryptographic signature) to detect counterfeit or cloned tags.
• Change control: If you ever need to update the destination address, we provide two options:
• Central redirect management – you can update the web target without touching the physical tag.
• Optional field re-encoding – authorised staff can rewrite tags using an approved NFC encoder and secure credentials (only when tags are not locked).

Threat Model (at a glance)

• Main risks: physical tampering, cloning, or phishing redirects.
  • Countermeasures: tag locking/crypto authentication, HTTPS, server-side ID checks, and usage monitoring.