Trust & compliance

Auditable from the first record.

GDPR

Anonymisation before storage, a DPIA per fund, data processing agreements with every clinic.

Anonymity proof

Attack-based evaluation of singling-out, linkability and inference risk for every fund.

EU AI Act Art. 10

Documented collection, preparation, bias examination and governance.

Audit trail

Every write on the platform is logged with who, what and when.

No patient data here

This platform stores only organisations, funds and aggregates. Patient data stays in the separate pipeline.

Data in Sweden

Vault and research environment run in AWS eu-north-1, Stockholm.