Security and data protection

We store clinic and patient data on servers in the EU, with no transfers outside the EEA.

We process speech and AI in the EU.

We do not store medical records: reports, medical histories or imaging. The assistant works with appointments, services and contact details.

Only the clinic the patient called can see the recordings, transcripts and summaries.

One clinic’s data is separated from every other clinic’s data.

In the portal each person has their own access, and the clinic’s administrator decides who can change what.

Every view of a call is recorded in the access log.

Call recordings and summaries are kept for a limited time: the conversation recording is deleted 30 days after the call, and the call content, meaning the caller’s number, reason, summary and transcript, after six months.

At the patient’s request we delete the data permanently: contact details, appointments, calls, transcripts and recordings.

At the start of every call the assistant says that it is an AI assistant and that the conversation is recorded.

Nothing is presented as a conversation with a person.

We sign a data processing agreement before the first real data.

100% compliant with the GDPR and the BiH Law on Personal Data Protection.

We take over the admin, not the decisions: no diagnoses, therapies or doses.

When a caller says they have urgent symptoms, the assistant tells them to call emergency services on 112.