Privacy and where your data is stored

Your patients' records are professional documents, and your clients' details are personal data. Here is what we do with both. The full detail is on our security page and in the privacy policy.

Where it is stored

The application runs on Render and files are stored on Amazon S3, both in the EU, in Germany. Your data stays under European law.

How it is protected

• Everything between your browser or phone and our servers travels encrypted (TLS).
• Personal data is also encrypted in our databases, backups included.
• Backups are encrypted and taken regularly.
• Access follows the roles: each person sees only the patients their role allows. See Roles and what they can do.
• Two-factor authentication is available to everyone, and every sign-in and account change is logged.

AI and your data

• Your data is never used to train public AI models. Every AI provider we use is bound by contract, in its data processing agreement, not to train on our traffic.
• Each AI call sees only the patient being worked on: nothing from other patients or other clinics. The AI doesn't browse the web.
• We log which provider and model handled a request, never its content.
• Organisations that need every AI call to stay in the EU too can limit processing to our EU-only providers.

You stay in charge: the AI drafts, and you check what goes out and remain responsible for it.

Who is responsible

Your clinic is the data controller for its patients and clients. We process the data on your behalf, under a signed data processing agreement. The companies that help us run the service are listed under subprocessors.

Your rights

You can export or delete your records at any time. On request we give access to, correct, delete or hand over the personal data we hold. How long we keep what is in the privacy policy. Write to team@digitalclinic.vet.