Trust & security

Your data. Your control. Clear rules.

No black box. Here is exactly where data lives, who owns it, how we protect it, and what support you get.

GDPR & data processing

  • You stay the data controller. We act as your processor.
  • A data-processing agreement (DPA) is available on request.
  • Consent is captured and stored with every request.
  • Data is used only to run your booking, reminders and CRM – nothing else.

Where data is stored

  • Hosted on private servers in the EU or inside your own network – the location is written into each project.
  • No shared database with other clinics.
  • Your data stays in your own instance.

Who owns the system

  • You own your data and your content.
  • Your domain, your brand, your account.
  • No lock-in – you can export your data and leave.

Backup & recovery

  • Regular encrypted backups.
  • A tested restore procedure.
  • A defined recovery time after an incident.

Support and response times

  • Agreed response times by severity.
  • A named contact for your team.
  • Monitoring and proactive fixes.
  • Monthly changes and improvements on a support plan.

Access & security

  • Access based on responsibilities – people see only what they need.
  • Encrypted connections (HTTPS) everywhere.
  • Access logs and least-privilege accounts.
  • Offboarding removes access immediately.

What we do not promise

  • No uptime figure unless it is written into a signed operating agreement.
  • No security certifications we do not hold.
  • No hidden AI providers: any external AI service is named before it is connected.
  • No financial, medical or legal advice from AI-assisted work – they prepare information, people decide.

Want the full security & GDPR pack?

We will share the data-processing details and answer your compliance questions.