Security

Tagger has a flexible security model designed to make it easy to keep your information private and yet share it with anyone you wish. The security model has the following features:

• Each tag can have write access and read access restricted to only the tag owner, anyone in the same email domain as the tag owner, or anyone in the world.
• Data is stored encrypted both in the cloud database and on the device.
• Data is encrypted during transfer.

On the other hand, Tagger does not support some more advanced security features such as - sharing a tag with only specific users, encyrpting a note's contents and requiring a password for decryption, or expiring access to a note after a given period of time.

Adding Security Features

As Tagger matures, more security features will be added. If there is a specific feature you feel is needed, reach out and tell us.

WARNING

Once information is displayed on a web page, it is beyond the reach of any Tagger restrictions. Anything on a web page can be saved by taking a picture of the screen and then shared as widely as the user chooses. Any user who can view a file attachment on a tag can download that attachment and distribute it if they choose. Tagger is not designed to protect highly sensitive information.

Data Security

The security model verifies the user has access to a tag before downloading any tag data.

Using Tagger Securely

One of the Tagger features that makes it flexible is that URLs can be included in notes. If you have data on another service that you consider to be more secure, simply add a note to a tag and edit the note to include the URL of the data on the other service. The example below might help understand it better.

Example Using External Storage

A commercial client has a well that is located some distance from their buildings. It is important that the pressure on that well be read every day. The readings are stored in a Google Sheets spreadsheet. So every day a worker drives to the well, notes the pressure, and enters it into the spreadsheet.

There are a couple of problems with this system:

1. The worker has to always know the correct URL.
2. The worker can either accidentally or purposfully fudge the data.
3. The spreadsheet URL changes since the company stores each year's readings in a different file and each month's readings in a different tab.

Tagger solves these problems. The client created a Tagger tag, added a note to the tag, and included in the note the URL to the current spreadsheet. Each time they move to a new spreadsheet, the client edits the note on their desktop computer so when it is next scanned, the user gets the correct URL.

The client can use the tag metadata to examine exactly when the tag was scanned, making it more difficult for the worker to fudge the data.

This example illustrates the prime mission of Tagger - directly associate small pieces of information (the well pressure) with a physical object (the well).

In this case, the data is all stored on Google Drive with only the URL stored on the Tagger system.

The terms Google, Google Drive, and Google Sheets are trademarks of Google, LLC.