Role Responsibility
Participating Institute Acts as controller for data collection and anonymization at institute level; collects data under national law; performs client-side anonymization; reviews results and resolves conflicts; uploads only anonymized data; retains any local mapping files.
IAEA (ZODIAC Team) Acts as controller for processing of anonymized data at platform level; receives, stores, and analyses only anonymized datasets; configures anonymization profiles and archives; monitors upload logs.
UNICC (Infrastructure) Provides secure hosting, encryption, access controls, audit logging, and DevSecOps governance.