This guide to General Occupancy Sensor Questions provides clear, practical answers about how workplace occupancy sensors capture data, how that data is processed, and how it’s used by organizations.
It explains the different sensor technologies available, the types of insights they produce, and how occupancy data supports smarter space planning—while addressing privacy, security, and compliance concerns so you have a transparent understanding of how occupancy sensing works in modern workplaces.
What kind of data do the workplace occupancy sensors capture?
Occupancy sensors use various technologies to detect the presence and movement of people in a space. The type of data captured depends on the sensor technology—some use passive infrared (PIR) to detect heat signatures, others use WiFi signatures. In contrast, computer vision-based sensors analyze visual information to understand space utilization.
Occupancy sensors collect data about how people use physical spaces, primarily tracking the number of people present in a given area and, in some cases, their locations within that space. This information helps corporate real estate (CRE), workplace, and facilities teams understand how spaces are actually being used throughout the day. More advanced occupancy sensor systems can capture additional insights, such as traffic flow patterns through different areas and detailed resource utilization—for example, tracking which specific desks or meeting rooms are being used when the platform offers highly accurate location data.
This data enables companies to make informed decisions about their space needs, optimize office layouts, right-size their real estate footprint, and ensure resources are allocated efficiently based on actual usage patterns rather than assumptions.
Workplace occupancy sensors offer far better privacy and security protection than legacy people-counting systems like keycard-based access control or app-based tracking systems, which record, store, and transmit personally identifiable information tied to specific individuals. Modern occupancy sensors are designed to capture anonymous data about space usage rather than tracking individual people.
Among occupancy sensing technologies, computer vision sensors provide the most accurate and comprehensive data about how spaces are being used. They can detect occupancy with precise positioning, distinguish between different space types, and provide real-time insights that other sensor technologies cannot match.
XY Sense sensors capture only X and Y ground point coordinates and anonymous metadata showing where people are located relative to the sensor, with approximately 30 cm (1 foot) positional accuracy and a refresh rate every two seconds. Through edge processing, all scene analysis happens in real-time on the sensor itself, converting visual input into anonymous coordinate data. No images, video, or personally identifiable information are ever stored, transmitted, or retrievable from XY Sense sensors.
Do workplace occupancy sensors offer better privacy protection than keycard and app-based systems?
Yes, workplace occupancy sensors provide significantly better privacy protection than traditional keycard-based access control or app-based tracking systems. Legacy systems like keycards and apps inherently collect, store, and transmit personally identifiable information that is directly linked to specific individuals—creating detailed records of who is present, where they spend time, and when.
In contrast, modern occupancy sensors are purpose-built to capture anonymous information about how spaces are being utilized, not to track or identify individual people. By focusing on space usage rather than individual tracking, occupancy sensors deliver the workplace analytics organizations need while offering substantially stronger privacy protections for employees and visitors.
Are individuals identifiable in the data collected by these sensors?
Workplace occupancy sensors are fundamentally different from keycard, badge, and app-based systems that explicitly record the presence and location of individuals and associate it with personally identifiable information. Workplace occupancy sensor systems generally focus on aggregate or anonymized information rather than tracking specific people.
For example, XY Sense offers the highest privacy and security protections available. Our technology never stores or transmits images or any form of PII, only the X, Y coordinates of individuals in the space at an accuracy of 1 square foot. This ensures outstanding privacy protection for all of your team members, allays concerns employees may have about the technology, and protects you from data collection that may not comply with national and international privacy regulations. Further, because images are never stored or transmitted with XY Sense, company secrets are also safeguarded.
Does the system use facial recognition or any biometric analysis?
Workplace occupancy sensor systems focus on aggregate or anonymized information rather than tracking specific people. They are not designed to identify or track specific individuals. XY Sense does not use facial recognition or biometric analysis. Through edge processing, the sensor performs all analysis directly on the device itself and never stores or transmits images. The system is not capable of identifying individuals or collecting personal information—it only records anonymous X and Y coordinate data.
Where is occupancy sensor data processed—locally on the sensor device or in the cloud?
Occupancy sensors handle data processing in different ways. Some send raw data to the cloud for processing, others process data locally on the device (edge processing) before transmitting only summarized information, and some use hybrid approaches.
Edge processing offers stronger privacy protection since raw sensor data never leaves the device. Companies that care deeply about privacy and security should insist on working with vendors that use edge processing.
XY Sense performs all occupancy data processing at the edge on the sensor itself. Data are processed in real time via proprietary machine learning algorithms, with each device securely processing information independent of other sensors. Through this edge processing, the sensor converts what it detects into anonymous X and Y ground point coordinates—simple numerical positions showing where people are located in the space, accurate to approximately 1 square foot. These coordinates contain no personally identifiable information and cannot be used to identify individuals. Only fully encrypted, anonymous X, Y coordinate data are then transmitted and made available via the secure analytics platform for workplace insights.
What encryption methods are used for occupancy sensor data transmission and storage?
Modern occupancy systems should use industry-standard encryption protocols to protect data both in transit (as it moves from sensors to servers) and at rest (when stored). Look for systems that use TLS encryption for transmission and AES encryption for storage, which are widely recognized security standards.
XY Sense uses comprehensive encryption: all data is fully encrypted from the sensor to the cloud using the MQTT protocol and TLS 1.2/1.3 encryption over port 8883. Data is encrypted at rest in the cloud using AES-256 encryption. The application is secured via HTTPS/TLS 1.2 over port 443.
How long is occupancy sensor data retained in the devices and in analytics platforms?
Occupancy sensors are fundamentally designed to avoid recording, processing, or transmitting personally identifiable information. These systems focus exclusively on anonymous space utilization data rather than tracking or identifying individuals, enabling organizations to gain valuable workplace insights while maintaining strong privacy protections for employees and visitors.
Data retention policies vary by provider and can often be configured based on customer needs and compliance requirements. Organizations should understand retention periods for both raw sensor data (if any) and processed analytics data, as different regulations may apply depending on what information is stored and for how long.
XY Sense collects and stores anonymous occupancy coordinate data for workplace analytics. Specific retention periods should be discussed with your XY Sense representative or reviewed in your service agreement, as retention policies can be configured based on customer needs and compliance requirements. Since XY Sense never records or transmits PII, data retention policies are generally guided by the preferences of the client to retain historical information.
Who can view or analyze the raw occupancy sensor output?
Access controls vary significantly between systems. Some occupancy platforms allow broad access to raw sensor data, while others prevent access to raw data or implement strict role-based access controls. Raw sensor data is not accessible to anyone if the sensors leverage edge processing for maximum privacy and security.
With XY Sense, raw sensor inputs are never stored or transmitted, so that no one can view them. Only anonymous, encrypted occupancy coordinate data is made available through the XY Sense Insights Platform to authorized workplace team members for reporting and analytics purposes. This provides the highest level of privacy and security protection available in the industry. We also offer a range of permissions levels in the platform to control data access at an individual or team level.
How is access to occupancy sensor data controlled and audited?
Again, systems vary, but there are best practices and protections you should look for and verify with the vendors you consider. Enterprise occupancy systems should implement strong access controls, including user authentication, role-based permissions, audit logging, and ideally single sign-on (SSO) integration with your existing identity management systems. Regular monitoring and alerting on unusual access patterns are also important security features.
XY Sense’s application supports OAuth-enabled single sign-on as well as 2-factor authentication to control access. The platform implements strict role-based permissions with quarterly access reviews. Sensors are actively monitored with 24/7 SOC monitoring, automated anomaly detection, and monthly vulnerability scans. XY Sense tracks the amount and pattern of data received from sensors, including memory, CPU, and other signs of activity on all sensors. All interactions are logged and auditable.
What happens if the occupancy sensor device or network is compromised?
Protections vary by supplier. Robust occupancy systems should have multiple layers of defense, including real-time monitoring, anomaly detection, automatic alerts, and incident response procedures. The impact of a compromise depends greatly on the system architecture—edge processing systems, where no sensitive data is stored on the device, offer inherently more robust protection.
For example, XY Sense monitors all sensors in real time to alert on any abnormal behaviors or connection issues. If data transmission stops, either because of malicious activity or a fault, the team is notified immediately, and an investigation begins. Additionally, even if a sensor were physically removed and opened, no images or information could be found or retrieved from the device. This is because our sensors do not store, process, or transmit any information or assets containing personally identifiable information or depictions of activity that might compromise company security.
We also have specific hardware safeguards in place which would make it impossible for sensor functionality to be manually overridden for malicious or unintended purposes and then reinstalled.
How can I determine if my occupancy sensor supplier complies with workplace surveillance and privacy laws?
Privacy regulations vary by jurisdiction and include laws like GDPR (Europe), CCPA (California), Australia Privacy Act, and various workplace surveillance laws globally. Occupancy sensor systems must be designed and deployed in compliance with applicable regulations, which may include requirements around consent, notice, data minimization, and the right to access or delete personal data.
XY Sense is fully compliant with the regulations and guidelines of all regions in which we operate, including GDPR, Australian Privacy Act, CCPA, and PDPA, meeting the strictest global data-protection frameworks. The sensor does not capture or store personally identifiable information, making it privacy-compliant by design. Privacy Impact Assessments (PIAs) have been completed for every region in which we operate. No customer has ever failed XY Sense for privacy or security reasons because we offer the highest standard of protection.
How do you communicate to employees and teams that occupancy sensors are being deployed?
Effective communication about occupancy sensors typically involves multiple touchpoints: advance notice before deployment, ongoing signage or visual indicators, information on company intranets, FAQ resources, and points of contact for questions or concerns. The goal is to build trust through transparency about what data is collected and how it’s used.
Your XY Sense contact can help you define a plan that delivers the assurances teams want. For XY Sense Flex Sensors (sensors on a stand), QR codes are available at the base of the units that link to privacy information for teams. Organizations should also communicate with their workplace, facilities, or HR teams about sensor deployment. We recommend proactive communication through multiple channels, including email announcements, intranet posts, and signage where appropriate.
Do we need to post notices or get employee consent before deploying these sensors?
Legal requirements for notice and consent vary by jurisdiction and the type of data being collected. Even when not legally required, workplace transparency is a best practice. Many organizations choose to inform employees about occupancy sensors through internal communications, signage, privacy policies, or employee handbooks.
As part of those processes, it is best to fully communicate the privacy and security advantages of occupancy sensors. By design, occupancy sensors are designed to collect anonymous information, versus keycard and badge-based systems that record individual activity. It’s best to speak with your chosen technology provider to provide example communications designed to address possible employee questions proactively.
XY Sense recommends informing employees about the presence and purpose of occupancy sensors through internal communications, signage, or other appropriate methods based on your organization’s policies and local requirements. We encourage aggressive transparency. For example, we suggest our clients show example XY Sense sensor output, which only shares the X, Y coordinates of individuals in the space. Contact your XY Sense representative for guidance on communication templates and best practices.
Can occupancy sensor systems provide valuable analytics (e.g., space utilization) without exposing sensitive details about individuals?
Well-designed occupancy systems deliver rich, meaningful, and actionable insights about space utilization, peak usage times, capacity planning, and workplace efficiency using only aggregated, anonymized data. Sensors with highly accurate location insights, like XY Sense, can also provide valuable insights on resource utilization for desks and other equipment.
XY Sense provides valuable analytics without collecting, processing, or using personally identifiable information. Anonymous sensor data is used to report on space utilization metrics such as desk usage patterns, meeting room utilization, popular spaces, capacity alerts, demand versus supply analysis, and space planning simulations—all without identifying any individuals.
Who owns the data collected by occupancy sensors?
Data ownership terms should be clearly defined in service agreements. In most deployments, the customer organization owns the occupancy data, while the sensor provider acts as a data processor or service provider. Understanding ownership is important for compliance, liability, and data governance purposes.
The customer owns their occupancy data with XY Sense. Customers retain full ownership of their data, and all interactions are logged and auditable. XY Sense never shares or monetizes customer data. Specific data ownership terms are outlined in your service agreement. XY Sense acts as a data processor, providing the platform and technology to collect and analyze the anonymous occupancy data on behalf of the customer organization.
Do occupancy sensor companies share or sell data with third parties?
Responsible occupancy sensor providers should have clear policies about data sharing, typically committing not to sell customer data and only sharing data with third parties as required by law or with customer consent. That said, most reputable occupancy sensor companies do not collect personally identifiable information, so it is of little/no value to third parties.
XY Sense never sells or shares individual customer data with third parties unless required by law. Since the sensor only captures 100% anonymous X and Y coordinate data and is not capable of identifying individuals or collecting personal information, there is no personally identifiable information to share. On a quarterly or semiannual basis, we produce the Workplace Utilization Index that aggregates data from across all clients and locations to provide national and international trends. This is an opt-in benchmarking program for workplace teams and companies have the choice to have their anonymous, aggregated data excluded.
Can employees request to see what data is being collected by XY Sense sensors about spaces they use?
Can employees request to see what data is being collected by XY Sense sensors about spaces they use?
How often are security updates or patches applied to XY Sense occupancy sensors?
How do XY Sense occupancy sensors guarantee that raw video or images are never stored or retained?
For XY Sense occupancy sensors, what security measures are in place to prevent a cybersecurity breach enabling bad actors from accessing raw data or personally identifiable information?
Have the XY Sense platform and occupancy sensors undergone third-party security audits or penetration testing?
