DR. INFO is a clinical reference and knowledge-support tool for healthcare professionals. This page explains how we protect the data of our users and customers. Our Data Processing Agreement and sub-processor list are available on request.
Our backend runs on Microsoft Azure and Google Cloud in EU regions, and our database is stored in the EU. Some services we use, such as web search and email delivery, are provided from outside the EU. Each one is listed in our sub-processor list. DR. INFO answers questions about medical knowledge and does not need patient data. Please do not enter details that could identify a patient.
Data is encrypted in transit with TLS 1.2 or higher and at rest with AES-256.
In our clinical documentation features, which hospitals use under a separate agreement, direct patient identifiers are replaced with placeholders in the text before AI processing. Consultation audio is transcribed first and then de-identified. The hospital, as the controller, decides the legal basis for processing, such as patient consent.
Our main cloud providers, Microsoft Azure and Google Cloud, hold ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018 certifications and SOC 2 reports.
We tell our customers in writing at least 30 days before we add or replace a sub-processor, and they may object on reasonable data-protection grounds.
These documents are shared with customers and organisations evaluating DR. INFO. Request access below and our regulatory team will send them to you by email.
Our agreement under Art. 28 GDPR for DR. INFO, including the technical and organisational measures.
Available on requestThe providers we engage, what each one does, where data is processed, and the transfer safeguard for each.
Available on requestQuestions about security or data protection?
Email our regulatory team at regulatory@synduct.com