R5 robot cleaning mall space

SOC 3 trust series, week 3

Data security and privacy in connected cleaning robots.

Published 29 May 2026 by the LionsBot Trust Team. Six minute read.

03Of three in the series
6Minute read
3Key takeaways

As cleaning robots become more connected, customers are asking better questions. Not just whether the robot can clean, but what data it collects, where that data goes, who can access it, and whether any of it is personal or sensitive. This article answers all of them.

Connected robots need clear data practices

Modern cleaning robots are not isolated machines. They connect to software platforms, cloud systems, dashboards, mobile applications, remote monitoring tools and fleet management systems. This connectivity helps customers manage operations more effectively.

It allows teams to see whether cleaning tasks were completed, where robots are operating, robot status and alerts, cleaning performance, maintenance or diagnostic information, and fleet activity across multiple sites.

This data can create real operational value. But the more connected a robot becomes, the more important it is for vendors to explain their data practices clearly. Customers should not have to guess what data is collected.

What data does a cleaning robot actually handle?

A useful way to think about data in cleaning robotics is to separate it into two categories.

Platform user data is data linked to people using the platform, dashboard or mobile application. This may include basic information such as name, email address and mobile number. It is used to support account access, platform operation and service delivery.

Robot operational data is technical data generated by the robot during cleaning operations. This includes robot telemetry such as LiDAR positioning, robot status, cleaning metrics and diagnostics. This type of data helps the robot operate, report cleaning performance and support troubleshooting.

Importantly, this is technical operational data rather than sensitive personal data. LionsBot does not collect biometric, financial or sensitive personal data by default. This is an important distinction for customers evaluating connected robotics.

Why data minimisation matters

One of the most important principles in privacy is data minimisation. In simple terms: collect only what is needed.

For cleaning robotics the purpose of data collection should be clear. The robot and platform should collect the data required to perform cleaning tasks, support operations, monitor performance and troubleshoot issues, and no more.

A responsible robotics vendor should be able to answer: what data is collected, why is it needed, is it personal or technical data, is any sensitive data collected, how long is data retained, and can data be deleted when required.

Cameras and visual data, a key customer question

One of the most common questions customers ask is whether the robot uses cameras. This is a fair question. Cameras can raise privacy concerns, especially in healthcare, airports, schools, offices, retail spaces and public buildings.

But not all camera use is the same. There is a major difference between cameras used for navigation and obstacle avoidance, and cameras used for surveillance or identification.

For customers, the key questions to ask any robotics vendor are:

  • Does the robot use cameras?
  • What are the cameras used for?
  • Is visual data used for identification or surveillance?
  • Is visual data processed locally or in the cloud?
  • How long is visual data retained?
  • Can the vendor provide this explanation in writing?

Where is customer data stored?

Customers increasingly want to understand where their data is stored, especially if they operate across regions or must comply with internal governance requirements. This is particularly important for European customers and multinational organisations.

Data residency is not only about where the server is located. Customers should also understand whether support access may occur from other locations, what safeguards are in place, and what agreements govern cross-border data handling.

LionsBot supports governance through mechanisms such as Data Protection Officer oversight, Standard Contractual Clauses, Transfer Impact Assessments and Data Processing Agreements.

Protecting data in transit and at rest

Customers should also ask how their data is protected technically. Two important areas are data in transit, meaning data moving between systems, and data at rest, meaning data stored in systems.

A robotics vendor should be able to explain these controls clearly and consistently. This is particularly important for IT and security reviewers in enterprise procurement.

Who can access the data?

Data security is not only about technology. It is also about access. Customers should understand who can access platform and operational data, under what circumstances, and for what purpose.

A responsible vendor should restrict access to authorised personnel only. Access should be role-based, logged, and limited to operational or support needs. The questions worth asking are:

  • Who can access customer data?
  • Is access role-based?
  • Is access logged?
  • Is access limited to support or operational purposes?
  • Are employees with access subject to confidentiality obligations?

Privacy is part of enterprise readiness

As robotics adoption scales, privacy becomes more important. A small pilot may be approved based mainly on cleaning performance. But an enterprise rollout across multiple sites often requires review from IT, security, legal, procurement and compliance teams.

A robotics vendor that can explain its data practices clearly will make it easier for customers to approve, deploy and scale robotics with confidence. Privacy is not just a legal topic. It is part of enterprise readiness.

Trust starts with transparency

Connected cleaning robots can deliver real operational benefits: better visibility, more consistent cleaning, multi-site management and greater insight into daily operations. But these benefits depend on trust.

Customers need to know what data is collected, how it is handled, where it is stored and how privacy is protected. At LionsBot we believe the future of cleaning robotics must be both connected and responsible.

Because trust is not built by saying less. It is built by being clear.

AICPA SOC for Service Organizations
Independently examinedLionsBot's SOC 3 report is produced by an independent public accounting firm working to the Trust Services Criteria published by the AICPA. It covers security, availability and confidentiality. Ask us and we will send it, because SOC 3 is written to be shared.

Bring LionsBot to your region.

Whether you are a facility manager, a distributor or an enterprise looking to deploy certified autonomous cleaning, we would like to hear from you. Ask for the SOC 3 report at the same time and we will send it with the reply.

Subscribe

Get the latest from LionsBot. New robots, deployments and what we are learning from real sites.

LionsBot International Pte Ltd · 84 Punggol Way, #08-61, Singapore 829911
© 2026 LionsBot International Pte Ltd. All rights reserved.