Privacy and security
Your patients' data stays protected, GDPR-compliant from the very first step.
You work with sensitive medical data, so privacy isn't optional. It's the default. Your account is protected from the moment you sign up, payments run securely through Stripe, and the privacy policy is written in plain language you can check anytime.
- GDPR compliantMedical data is processed as a data processor under GDPR, exclusively on behalf of the clinic or practice that collects it.
- EU-only hostingAll data is processed and stored exclusively within the European Union.
- Full encryptionData is encrypted both in transit (TLS) and at rest.
- Restricted, audited accessAccess to production data is limited to authorized staff, logged, and tracked through an audit trail.
- Employee background checksStaff with access to medical data go through a background check before being hired.
- Regularly tested backupsRegular backups, with restore procedures tested periodically.
- Firewall and SIEM monitoringProduction infrastructure is protected by a firewall and continuously monitored for suspicious activity.
- Secure payments via StripeCard details never reach Dictaris servers — payment processing is handled entirely by Stripe.
- GDPR compliant
Data is collected and processed in line with GDPR from the registration form onward.
- Secure payments
Transactions run through Stripe. Your card details never pass through Dictaris servers.
- No fine print
No hidden clauses. You always know exactly what happens to your data and your patients'.
- You stay in control
Request access, export, or deletion of the data tied to your account at any time.
The medical data you process stays yours to control. Dictaris Neo never uses it for anything beyond generating the report you asked for, and the app's architecture is built specifically for the context of a clinic or medical practice.
