The following does not replace the official Privacy Policy.
The two most important principles are data minimisation and processing data within the EU:
Clivora processes patient data solely for the purpose of producing documentation, and only for the duration of that process: after the report is written it stores neither audio nor text, does not use it for training, and does not log it.
Sensitive personal data is processed within the European Union, both at rest and in flow.
Authentication tokens contain no clinical data.
Session data is stored encrypted.
The healthcare provider is the data controller; Clivora acts as a processor under the relevant agreement.
Patients may exercise their rights under applicable law (access, erasure, etc.).
For details, see the official Privacy Policy.