The customer, operator of the site
Controller: purpose, legal basis, information of people, retention period, impact assessment. Video surveillance with automated analysis is high-risk processing.
Guide · Nx Witness
GDPR and AI video analytics in Nx Witness: what you need to know.
With the IA-N Analyse plugin, the video analytics run inside the site's Nx Witness server: no image leaves the site and there is no facial recognition. The customer who operates the site remains the controller (purpose, information of people, retention period, impact assessment); ElectroniSafe provides the software and tools that help: excluded zones, plate reading limited to a zone, and a site GDPR file prepared in one click by its portal, without any personal data.
Updated on 21 October 2026
Who does what
Each party has its role.
The installer
Sets up the system with the customer: monitored zones, excluded zones, plate reading limited to what is necessary, information sign and notices.
ElectroniSafe
Software manufacturer. The plugin sends no image; licence data goes to its portal, hosted in France.
The alarm monitoring centre
Only if transmission is enabled: recipient of the alarms, to be listed in the record and in the DPIA, with a data processing agreement.
What leaves the server
The data, one by one.
| Data | To | When |
|---|---|---|
| Images | Nowhere | Never: they are analysed in memory; the plugin records none and sends none |
| Licence: key, number of cameras, hashed technical fingerprints of the server, versions of Nx and of the plugin | ElectroniSafe's portal, hosted in France | At activation, then one check per day |
| Plugin version and system type | ElectroniSafe's update server | Once a day, for updates |
| Business e-mail, company, country and language entered | ElectroniSafe's portal | Only for the free trial requested from Nx |
| Analysis configuration, without personal data | ElectroniSafe's portal | Only when “Prepare the GDPR file” is clicked |
| Alarms: account, code, zone, time, short text and link if enabled | Alarm monitoring centre chosen by the customer | Only if alarm monitoring is enabled |
Boxes, alarms and plates are kept by Nx, with the retention period the customer sets in Nx.
Site GDPR file
The GDPR file in one click.
- 01 / Open
The “GDPR file” frame
Site Administration › Integrations › “IA-N Analyse”, “GDPR file” frame.
- 02 / Prepare
In one click
“Prepare the GDPR file” button: the server configuration goes to ElectroniSafe's portal, without any personal data (no image, no address, no camera identifier, no zone name). Camera names are only sent if the “Include the camera names in the file” box is ticked.
- 03 / Receive
By e-mail
The portal prepares the record, the DPIA, the information of people and the signs, and sends them to the licence holder (link valid for 7 days).
- 04 / Without Internet
By file
The configuration is written to a file in the plugin folder, to be uploaded in ElectroniSafe's portal.
Good settings
Limit the analysis to what is necessary.
- Excluded zones (up to 8 per camera) over neighbours' windows, the public road and areas that do not concern the customer: nothing is analysed there.
- The camera's privacy mask as well, to hide the image itself: Nx always records the whole image.
- Detection zones drawn only over the monitored areas.
- Plate reading only where it is necessary, inside a tight zone.
- Retention period set in Nx: 30 days at most by default for video surveillance.
- Information sign on site and notices, mentioning the automated analysis of the images.
People filmed
No facial recognition.
The plugin detects that there is a person, a vehicle or an animal; it never tries to find out who a person is. No biometric data is processed. The plugin logs only contain counters, durations and states: license plates and e-mail addresses are masked in them, with no camera name. More details on the Trust page and in our privacy policy.
Frequently asked questions
GDPR and AI in Nx Witness
Another question? Our sales team will answer.
Who is the controller when AI is added to Nx Witness?
The customer who operates the site: they decide what is filmed, inform people, set the retention period and carry out the impact assessment. ElectroniSafe is the software manufacturer.
Does the IA-N Analyse plugin do facial recognition?
No. It detects people, vehicles and animals without trying to find out who a person is: no biometric data.
Is a data protection impact assessment (DPIA) required?
Video surveillance with automated analysis is high-risk processing: the impact assessment is the controller's responsibility. The “Prepare the GDPR file” button has our portal prepare the site's record, DPIA, information of people and signs.
How long should alarms and plates be kept?
Boxes, alarms and plates are kept by Nx, for the period set by the customer: for video surveillance, 30 days at most by default; for license plates, 30 days at most unless there is a justified reason.
Is licence data personal data?
No: the key, the number of cameras, hashed technical fingerprints of the server and the software versions; no image, no camera name. For a trial requested from Nx, the business e-mail entered is personal data of the person requesting the trial.
Also worth reading
To find out more.
Nx Witness is a trademark of Network Optix, Inc.; DW Spectrum, of Digital Watchdog.
Prepare the GDPR file of an Nx Witness site?
The GDPR file is included in every IA-N Analyse licence.