Security perimeter

The Privacy Vault

Donor grade deidentification, applied to construction. Suppliers receive mass and geography: never a builder, a project or an address.

Published to suppliers

Deidentified record

builder
BUILDER_B79_QLD
project
Demand Group: Commercial / Civil
address
Brisbane CBD Grid Sector 4 (hexagon)
material
CBR45 Road Base
tonnes
4,500
date
11 to 13 October window
contact
withheld

Pipeline

Three irreversible transforms

  1. 1

    Data masking

    Company, project and contact fields are replaced with a randomised cryptographic token at ingestion.

  2. 2

    Spatial blur

    Pinpoint coordinates collapse into a hexagon sector. A supplier can position trucks; they cannot find the site.

  3. 3

    Double blind tokens

    Builder tokens and logistics transaction IDs are linked only inside the encrypted vault. Neither side can walk the join.

Guarantees in the contract

  • Read only scoped API tokens: four fields, no write capability.
  • No automatic cancellation: every schedule change requires a human click.
  • Probability weighted duplicate purging so repeat quotes never inflate the map.
  • Priority truck allocation in peak season in exchange for anonymous forecast data.

What each party can see

FieldBuilderQuarry / supplierSuggiForesite vault
Company identityOwn onlyNeverEncrypted
Project name & addressOwn onlyNeverEncrypted
Hexagon sectorYesYesYes
Tonnage & materialOwn onlyAggregatedYes
Date windowExactBlurred ±1 dayExact
Competitor demandNeverAggregated onlyEncrypted