The hospital is the data fiduciary. Drapto is the data processor. We process personal data only on your documented instructions.
NADI · DOCUMENT
● Status current
● Plain language yes
● Contact stated
✓ published, dated, binding
- We do not use your patient data to train anything.
- We do not sell it, share it, or make it available to any other customer.
- We do not use it for our own analytics beyond aggregate, non-identifying operational metrics.
- On termination, we return or delete it at your instruction.
The executable version
A signable DPA is available on request. This page is the plain-language summary of it, and where the two differ the agreement governs.
Read the rest of it.
Every one of these pages says what we do, what we do not, and who to write to when it matters.