Black Friday PreviewAmazon USBlack Friday preview: compare before the rush hitsAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowBlack Friday PreviewAmazon USThe best pick may show up before FridayAmazon US: current deals, useful picks and tech finds.See Picks×
BETTESWORTHConstruction

Secure Survey Data Sharing: A Field-Crew-to-Office Workflow

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

Securely sharing survey data between field crews and the office means protecting it on the device, while it is being transferred, and after it arrives in the office system. The dependable approach is an organization-approved collection platform, individual managed accounts, least-privilege access, encrypted connections, a tested offline-sync procedure, and protected backups. An encrypted upload alone does not prove that local caches, exported files, server storage, or a supervisor’s relay device are secure.

This workflow is general guidance rather than a project-specific security assessment. Confirm the data classification, contractual duties, retention rules, hosting location and legal requirements for your jurisdiction before deployment.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What does secure field-to-office survey sharing require?

A secure workflow has three protection points: the field device, the connection, and every stored copy. Treat the survey as sensitive until the project owner has classified it. Personal details, precise locations, infrastructure information, photographs and notes can create different confidentiality, integrity or safety risks, so the controls should match the impact of a loss.

Use an approved survey or GIS platform rather than assembling ad hoc exports. The system should provide named user identities, role or group permissions, encrypted communications, an offline mode where needed, synchronization status and an auditable way to see who changed or reviewed records. NIST recommends limiting an exchange to the data needed for the stated mission or business case instead of transferring an entire dataset; its SP 800-47 Rev. 1 states: “Organizations are advised to limit or restrict exchanged information to only the specific data needed to support the stated mission/business case rather than transferring the entire dataset.”

Popular on Amazon
Sale
DEWALT 20V MAX Cordless Drill and Impact Driver (DCK240C2) | Power Tool Combo Kit, Includes 2 Batteries, Charger and Bag
  • Ergonomically Designed: Work in tight areas with a compact design that gets into tough spots
  • Both tools are designed to fit into difficult to reach spaces
  • Complete a wide range of applications with a high-performance motor that delivers up to 300 UWO, and an impact driver delivering up to 1,400 in-lbs of torque
  • Both the DEWALT impact driver and drill driver feature integrated LED work lights with a convenient 20-second delay, ensuring enhanced visibility in dimly lit or challenging work areas
  • One-Handed Loading - Keep one hand free with a 1/4 in. hex chuck that accepts 1 in. bit tips

Do not confuse transport security with complete security. HTTPS/TLS protects data on the network, but the device cache, server database, exports, backups and administrator access require separate controls. The World Bank’s DIME data handbook notes that at-rest encryption may need to be explicitly enabled and that provider or system-administrator access should be considered.

How should a construction team classify the survey before choosing a system?

Start with a short written classification and handling rule. That decision determines which platform, accounts, devices, locations and retention period are acceptable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Inventory the fields. List names, contact details, photographs, coordinates, asset identifiers, drawings, inspection notes, health or safety information and any credentials or keys that might be included.
  2. Identify the harm. Ask what could happen if a record were disclosed, altered, unavailable or associated with the wrong site. A public topographic observation and a precise record of a critical facility should not automatically receive the same treatment.
  3. Define the minimum exchange. Specify the crew, date range, map area and attributes required for the assignment. Create a view or extract containing only that subset where the platform supports it.
  4. Record obligations. Note the project owner’s contract, applicable privacy or records rules, hosting-country requirements and the approved retention and deletion date. If any requirement is unknown, escalate before collecting.

Keep this classification with the project handover. It gives the office a defensible reason for choosing a system and prevents a convenient export from becoming an uncontrolled second dataset.

Which accounts and permissions should field crews use?

Give every person an individual, organization-managed identity and only the rights needed for the assignment. Shared logins make it impossible to attribute an edit or revoke one worker without affecting everyone.

Role Typical need Controls to apply
Field collector Download an assigned area and create or update observations Limit projects, layers and editing scope; prohibit administration and bulk export
Field supervisor Review crew submissions and coordinate synchronization Permit review and approved relay functions, but not unrestricted access to unrelated projects
Office reviewer Validate, correct and release records Separate review from system administration; retain an edit history where available
Platform administrator Configure users, groups, storage and recovery Use a small named group, strong authentication and a documented change process

Use groups for the project and remove membership when a person leaves or changes assignment. Sharing and editing are different decisions: a crew may need to submit a record without being allowed to change an approved record or download the complete layer. Esri documents named-user identity, groups, custom roles and feature-service views as controls in its own hosted feature-layer environment; treat those as vendor capabilities, not assumptions about every platform. See Esri’s access-control documentation for that product-specific model.

Keep an access register containing the user, role, project, approval date and removal date. Review it at mobilization, at handover and after a crew member’s device or employment status changes.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How should devices be prepared before deployment?

Prepare and enroll devices before they contain production data. The objective is to make a lost or borrowed tablet less useful to an unauthorized person and easier for the organization to contain.

Also popular on Amazon
Sale
Nicpro Mechanical Carpenter Pencils for Construction (Black, Red) With Case | Deep Hole Marker Pencil Set Includes Sharpener and 26 Refills, Comfortable Grip, Heavy Duty Woodworking Tools for Architect
  • Valued Carpenter Pencil Set: You will get 2 pcs solid carpenter pencils with 26 piece 2.8 mm refills, 1 replaceable sharpener, 1 plastic storage box.The complete carpenter pencils combination allows you to finish your work faster and more easily
  • Deep Hole Marker Pencil: The deep-hole construction pencils adopts 45mm elongated tip design, which is more convenient to mark in the small hole or in other tight areas that other carpenter markers cannot reach
  • Carpenter Pencils with Sharpener: The sharpener is screwed into the top of the work pencil, which won't get lost either. Built-in pencil sharpener that keep the lead with pointed and smooth to Improves line of sight in fine work
  • Stronger Solid Lead: This work pencil is matched with a 2.8 mm thick lead , which is much thicker and stronger during the drawing process of construction work, it will not break or damage easily
  • Marks on Various Surfaces: 3 colors solid construction pencil can marks on various surfaces,such as metal, plastic, wood, paper etc. Ideals for woodworkers, contractors, craftsmen, builders, merchants and masons
  1. Use supported, managed hardware. Confirm that the operating system and collection app are supported, patches can be installed, device encryption is available, and the organization can enforce settings and remotely wipe the device. Durability and battery capacity matter operationally, but do not substitute for management and encryption.
  2. Require separate authentication layers. Set a device lock with a unique passcode and require the collection app to authenticate to the organization account. Do not rely on a crew-wide PIN or a browser session left signed in.
  3. Turn on encryption and backup controls. Verify device encryption is enabled, understand where offline files and photo caches are stored, and ensure backups do not silently copy restricted data to an unmanaged personal account.
  4. Reduce interfaces. Disable removable-media transfer, Bluetooth, personal hotspots or other interfaces that the approved workflow does not need. Keep only the connectivity required for the assignment and restore normal settings through management after closeout.
  5. Enable remote response. Confirm that the device appears in the management console, a remote-lock or wipe command can be issued, and the incident contact knows the device identifier. A wipe is not a substitute for revoking the user’s session and tokens.
  6. Install and configure centrally where possible. Apply the approved app version, server URL, certificate trust settings and screen-capture or sharing restrictions through mobile-device management. Esri describes managed app configuration and mobile security capabilities for its own mobile applications in its ArcGIS Trust Center; verify equivalent controls with your chosen platform.

Record the configuration baseline and the date it was checked. Do not preload the entire company dataset just because the device has storage; the offline package should be limited to the crew’s assignment.

How do HTTPS, TLS and at-rest encryption fit together?

Use the approved service over HTTPS with a valid, trusted certificate. TLS protects the session between the app and server, reducing the risk of interception on a network. It does not encrypt a spreadsheet exported after the upload, a local offline geodatabase, a photo cache, or a server backup unless those locations have their own protection.

Ask the platform owner or administrator four separate questions:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Is the connection forced to HTTPS, and how are certificates validated?
  • Is data encrypted at rest on the field device, the primary server, temporary storage and backups?
  • Which provider staff or system administrators can access unencrypted content, and how is that access logged or limited?
  • Where are the primary and backup copies stored, and how are they deleted at the end of retention?

The World Bank DIME handbook specifically cautions that at-rest encryption may require explicit configuration and that privileged provider access is part of the threat model. If a vendor cannot answer these questions, do not place restricted survey data in the service until the project owner accepts the residual risk.

How do crews work safely when there is no internet?

Offline collection is a normal field requirement, but it must be designed rather than improvised. Prepare a bounded offline area, test a complete synchronization cycle, and keep local copies until the office confirms receipt.

  1. Prepare the map and layer. Create an offline-capable map or project containing only the required area, layers, forms and reference records. Set the smallest practical extent and remove unrelated attributes.
  2. Download while connected. Have the named user sign in on the managed device, download the package and note its version or timestamp. Do not use a personal account to create a second copy.
  3. Test before mobilization. Collect a sample point, photograph or form response, disconnect the device, edit or add a record, reconnect and synchronize. Verify that the office can read the result and that the app reports no pending changes.
  4. Collect with a local status check. At the end of a shift, review pending edits, failed attachments and storage warnings. Do not interpret a green network icon as proof that every record has synchronized.
  5. Synchronize deliberately. When coverage returns, use the approved app and connection, wait for completion, and inspect errors or conflicts. If the app offers a download or refresh step after synchronization, perform it so the local state matches the server.
  6. Preserve evidence until confirmed. Keep the local package until an authorized office person confirms the records, attachments and metadata are present and readable. Only then follow the retention procedure for clearing local data.

Esri documents offline editing and later synchronization for hosted feature layers with Survey123 and Field Maps, and its Field Maps configuration guidance covers preparing maps for offline use. The exact behavior varies by app and layer, so test the version and configuration used on the project.

Pay particular attention to sign-out behavior. Esri warns that signing out while offline can delete unsent tracks in its location-sharing feature. That warning concerns tracks, not every survey record; check the exact app’s documentation before signing out or uninstalling.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Also popular on Amazon
Push to Unlock, Katerk 6pcs 1/4 inch Hex Shank Screwdriver Bit Holder | Aluminum Alloy Drill Bit Holder Keychain Quick-Change Extension Bar Drill Screw Adapter, Black Carabiner, Tool Gifts for Men
  • 【Great Compatibility】This Katerk 1/4 inch hex shank bit holder is specifically designed for 1/4 inch hex shank drill bits. It's compatible with most 1/4 fast hex handles, hex sockets, various electric screwdrivers, and handheld screwdrivers. The bit holder makes it a valuable addition for any handyman.
  • 【Secure and Safe】Built with a secure backup nut design, each drill bit holder securely locks onto your bits, ensuring they stay firmly in place. Additionally, our bit holder incorporates a high-quality steel ball rolling design that holds up to several kilograms of weight, ensuring your various drill bits don't fall off.
  • 【Easy One-Handed Operation】The bit holder for impact driver allows you to change bits single-handedly, simplifying your workflow. Its multi-color design further allows for quick identification of the drill bit you need.
  • 【Compact and Convenient】Thanks to its compact size, this 1/4 inch bit holder is easy to carry around. The bit holder allows for easy attachment to various tools, making this a convenient addition to your construction accessories. The Katerk bit holder is cast from high-quality alloy material, promising a long product lifespan. Despite its rugged strength, the bit holder remains lightweight, making it portable.
  • 【Cool Christmas Gift For Men Stocking Stuffers】 This screwdriver bit holder, driver bit holder, impact bit holder, can be given as a gift to your loved one, especially for anyone involved in construction or electrical work. It's a must-have for stocking stuffers for men and women, tools gifts for dad, tech gadgets for men, gifts for dad, gifts for him, gifts for husband, gifts for boyfriend, cool gadgets for men, and cool gifts for dad.

How often should crews upload survey data?

Upload daily or as frequently as connectivity permits, rather than waiting for the end of a long deployment. The United Nations household-survey handbook recommends that cadence because shorter intervals limit the amount of data exposed by a lost device and give the office earlier visibility into quality or safety issues.

Set an operational rule such as “synchronize at the end of each shift when coverage allows.” Record the user, time, project area and result. A failed upload should create a ticket or supervisor notification, not an invitation to email an export around the control system.

Do not clear a device merely because the app displayed an upload animation. The office should confirm record counts or a known sample, attachments and any conflict report. If the platform has no clear completion status, define a manual confirmation step and retain the local copy until it is complete.

What if crews are remote for an extended period?

A supervisor’s tablet or laptop can act as a relay when teams cannot reach the office, but it becomes another production copy. The United Nations guidance describes this proxy pattern for extended remote work; apply the same encryption, account, access, backup and deletion rules to the relay as to the original field devices.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Assign the relay to a named supervisor and enroll it in device management.
  2. Limit its offline package to the teams and area it supports.
  3. Use the approved encrypted connection when transferring from crew devices to the relay and from the relay to the office.
  4. Keep a transfer log and a clear handoff owner.
  5. After the office confirms receipt, remove relay copies according to retention rules and verify that backups or temporary folders are not retaining them.

A relay can improve availability but increases duplication and the number of devices that could be lost. Use it only when the operational benefit outweighs that additional exposure.

How should the office verify and protect the received copy?

Verification is a control, not an administrative nicety. The office should confirm that the intended records arrived, that authorized staff can read them, and that no synchronization error or conflict silently removed an edit.

  1. Check the transfer identity and time. Match the upload to the crew member, device or relay and the expected project area.
  2. Check completeness. Compare the expected collection range or local pending count with the server result. Spot-check forms, coordinates, photographs and other attachments.
  3. Review conflicts and duplicates. Follow the platform’s conflict-resolution procedure and assign a named reviewer; do not overwrite competing edits without recording the decision.
  4. Secure the working copy. Apply server-side encryption at rest, role-based access and backup protection. Restrict exports and shared folders to the smallest audience.
  5. Protect backups. Include databases, file attachments, offline packages, spreadsheets and temporary exports in the backup inventory. Test restoration with authorized staff without creating an uncontrolled copy.
  6. Confirm handoff. Mark the transfer complete in the project log only after the office reviewer has accepted it.

NIST notes that controlled access can reduce duplicate datasets and the risks of transferring copies, but the appropriate method depends on the mission and the impact of a confidentiality, integrity or availability loss. A central sync workflow is not automatically safer if it grants broad access or leaves unmanaged exports everywhere.

Also popular on Amazon
Sale
Toolwiz Magnetic Pick Up Sweeper 17-inch Wide, 8.8 Lbs Magnet Pull Force | 8.8 Lbs, Rolling Magnetic Sweeper, Heavy Duty Magnet Pickup with Smooth Wheels, Yard Tools, Clean Nails for Construction
  • Toolwiz 17-inch magnetic sweeper maintaining a load capacity of up to 8.8 pounds provides a perfect solution to the problem of clearing small ferrous metal objects, such as nails, tacks, bolts, and metal shavings from workshops or garage floors.
  • Convenient and portable:17” is good for home, small workshop, or small yard as it is space-saving and more reachable for narrow areas. Perfect for collecting nails or small parts in the car, under the table, and in other nooks or crannies.
  • Upgraded Handle Design: The handle features a sturdy, non-telescopic design to completely prevent slipping during use. By simply adding or removing the extension poles, the height can be adjusted to 3 different lengths: 18.9" (48 cm), 32.5" (82.5 cm), and 42.5" (108 cm) from ground to top. This customizable height helps prevent back bending and muscle strain, making your cleaning tasks effortless
  • Flexible wheels: Upgrade wheel screws to avoid being too tight to spin or too loose. More comfortable 3-inch rubber wheels roll smoothly on carpet, grass, concrete, and hardwood floors. Just push and pull this rolling magnet-sweeper to pick up metal nails easily.
  • Lightweight materials: The magnetic nail sweeper's compact and lightweight design makes the sweeping can be done anywhere you want, Push or pull it under the furniture, passing through the workshop floor, driveway, mud, grass, and gravel.

Which transfer method should a project choose?

Choose the method that fits connectivity, editing needs and the consequences of a lost or incorrect record. Do not choose solely because a file is easy to attach to an email.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Decision factor Centrally hosted, sync-enabled workflow Manual or relay-based transfer
Connectivity Best when intermittent connections can eventually reach the approved service Useful when teams must exchange through a supervisor or scheduled connection
Offline editing Requires an offline-capable map or layer and a tested sync cycle Requires a controlled package handoff and reconciliation process
Identity and roles Can enforce named users, groups and granular sharing where the platform supports them Needs separate permission checks on every device, folder and export
Concurrent edits Use the platform’s conflict and synchronization controls Plan who merges records and which copy is authoritative
Copies and backups Central control can reduce uncontrolled duplicates, but server and backup access still need protection Every relay, removable file and temporary folder adds another copy to secure
Urgency Frequent synchronization gives the office earlier visibility May delay review until a physical or scheduled handoff
Lost-device response Revoke the user and wipe the managed device, then assess unsynchronized data Apply the same response to each relay and storage location

Document the decision and its residual risks. If the project needs offline editing, frequent office visibility and per-user auditability, a prepared sync workflow is usually a better fit than passing spreadsheets between people. If coverage is exceptionally limited, a relay may be necessary, but its additional copy must be explicit in the security plan.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What should happen when synchronization fails?

Stop deleting local data and diagnose the failure from the original device or relay. A failed sync is a data-integrity event until you know whether records are pending, duplicated or partially accepted.

  1. Keep the device powered and locked; do not uninstall the app or sign out while offline.
  2. Record the project, user, device, time, network condition and error text.
  3. Check storage, certificate or account-expiration warnings and whether the offline package is still valid.
  4. Reconnect through the approved network and retry once according to the platform procedure.
  5. If the error persists, export only through an approved recovery process and involve the platform administrator; never use personal email or consumer file sharing as a workaround for restricted data.
  6. After recovery, have the office compare the server copy with the device’s pending edits and resolve conflicts before closing the incident.

For an unaccounted-for device, revoke sessions and access immediately, notify the incident owner and issue a remote lock or wipe. Determine what unsynchronized data was on it and whether the project owner or regulator must be notified.

What is the closeout checklist for field devices?

Closeout is complete only after the office has accepted the data and the organization has handled every local copy.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Office confirmation lists the expected records, attachments and unresolved exceptions.
  • Pending edits and failed uploads are zero, or have a named owner and recovery plan.
  • Local caches, exported files, photographs and offline packages are removed when the retention policy permits.
  • Relay devices and removable media are cleared under the same procedure.
  • Project groups and temporary accounts are revoked; departing users lose access promptly.
  • Backups and archive copies are tagged with the approved retention date and access restrictions.
  • Lost, damaged or replaced devices are reported so remote wipe and credential revocation can occur.
  • The project log records who synchronized, who verified, what exceptions remain and when deletion occurred.

Retention is not the same as “delete immediately.” Preserve records that a contract, legal hold, safety investigation or records schedule requires, but do not keep convenient personal copies outside that controlled process.

How can a supervisor make this workflow practical for crews?

Turn the controls into a short field procedure and rehearse it before mobilization. A one-page card can state: use only the assigned account and device; collect only the assigned area; synchronize daily when possible; check pending edits and errors; never email restricted exports; report a lost device immediately; and wait for office confirmation before clearing data.

Also popular on Amazon
Damaged Screw Extractor Set,Christmas Stocking Stuffers for Adults Men Him | Gifts for Men,Mens Gifts for Dad,Husband,Stripped Screws Bolt Drill Bit Tools for Easy Removal of Rusty Broken Screw
  • APPLY TO MOST DRILLS : 6 pieces screw extractors work with any drill and all the screw size or bolt (3-12mm), These extractor tools are used to reverse the damaged screw counterclockwise until it is released
  • The DIY Tools for Men-Men won't know they need screw extractor set until they have one! This screw extractor set is GIFTS WRAP AVAILABLE, can be gifted to your loved ones as it reflects a fresh trend with fun and practical. Amazing and Unique tool gifts for men women. The must have stocking stuffers for men, gifts for dad, husband, father, him, guy teens, adult, Boyfriend, son on Birthdays, Christmas, Fathers Day or anniversary. Perfect Holiday Gifts Guide
  • HIGH QUALITY - This damaged screw remover tool kit is made from High-Speed Steel H.S.S 4341# , which have high hardness of 63hrc, it's durable and easily to remove any damaged screws.
  • EASY TO USE: Just two simple steps to get the job done - drill a hole with a cutting size using the right size screw extractor and easily remove the screw or bolt using the removal tool Hardness 63-65HRC: Titanium hardened steel material, more durable than most screw extractors on the market, better hardness and durability than others, buy with confidence and complete peace of mind
  • Cool Gadgets for Men Dad Christmas Birthday Gifts for Men and Women - Men won't know they need screw extractor sets until they have one! Every screw has the potential to rust and break, which can create a situation where it cannot be removed. Owning it, there will be no anxiety about rusty screws. This screw extractor set is GIFTS WRAP AVAILABLE, can be gifted to your loved ones as it reflects a fresh trend with fun and practical. Amazing and unique tool gifts for men women. A must have stocking stuffer for men on birthdays, Christmas, Father's Day or anniversaries, a gifts for dads, husbands, fathers, him, adults, boyfriends, sons. The best and most practical and surprising Christmas gifts

Run a tabletop exercise with one device offline, one failed attachment and one lost-device scenario. The exercise is a process rehearsal, not a performance claim: it reveals whether the crew knows whom to call, whether the office can identify unsynchronized records and whether remote wipe and access revocation are actually available.

Review the procedure after each project handover. Update the app version, map-preparation instructions, retention dates, escalation contacts and platform settings when they change. Keep vendor-specific instructions separate from the organization’s general rules so a platform migration does not leave a security gap.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

Can a crew send a restricted survey export by personal email if the office is waiting?

No. Personal email creates an unmanaged copy and bypasses the project’s identity, retention and access controls. Use the approved encrypted workflow or escalate a documented service outage to the project administrator for a controlled recovery path.

What should be retained after a successful synchronization?

Retain the authoritative office record and any copies required by the project’s retention schedule, contract or legal hold. Remove temporary device, relay and export copies only after the office has confirmed completeness and the retention owner has authorized deletion.

Does an offline map contain the whole survey database?

Not necessarily; a properly prepared offline package can be limited to a map area, layers and records the crew needs. Confirm the package contents before download, because the exact scope depends on the platform and its offline configuration.

Who should approve a new field-to-office sharing method?

The project owner or information-security authority should approve it after reviewing data classification, user roles, hosting and backup locations, offline behavior, retention and lost-device response. A platform administrator can configure the method, but should not be the only person deciding whether the exchange is appropriate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply. Prices as of November 14, 2026 12:04 pm GMT+0000.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.