At Medendo, security, privacy, and safeguarding confidential information are our highest priorities. We provide a reliable and secure digital assistant trusted by patients, clients, healthcare professionals, and healthcare institutions.
Furthermore, at Medendo, we respect the privacy of our website visitors, particularly regarding the automated processing of personal data. We have developed and implemented a comprehensive policy that offers our clients full transparency regarding these processing activities, including their purpose and the options for data subjects to exercise their rights.
Certified
NEN 7510-1:2017Certified
ISO 27001:2022Compliant
AVG / GDPRHosting
Servers within EuropeData Storage
Audio is never storedData Storage
No long-term data storagePrivacy
No model training on user dataCompliant
EU AI ActIn progress
MDR Class IIa CE MarkingFAQ
All conversation data is processed exclusively within the European Union and stored encrypted. Your conversations do not leave the EU.
As short as possible. Four retention periods apply:
Your organization may agree on a different retention period for conversation data than the standard 7 days. This agreement is specified in the Data Processing Agreement.
No. The audio is deleted immediately after the transcript is created. A zero-retention policy also applies to the suppliers who generate the transcript and report: nothing is stored there.
No. Recordings, transcriptions, and reports are never used to train AI models, neither by Medendo nor by our suppliers. We do not sell data and do not use it for advertising.
Medendo is ISO 27001 and NEN 7510 certified and operates in accordance with the GDPR. The certification was conducted by an independent party. Medendo’s suppliers must meet at least the same requirements.
Your patient/client has the right to know that AI is being used during the conversation and may refuse this. Therefore, briefly explain what Medendo does and ask for their consent. If someone does not agree, do not record the conversation and create the report in your usual way.
An example sentence you can use: “We use Medendo to quickly and safely convert conversations into text, so I can focus better on you and spend less time on administration. The recording is deleted immediately after the conversation. Do you mind if I use this?”
At Medendo, technologies and procedures are designed so that employees only gain access to data during the period for which specific agreements have been made with the client. By logging user data, Medendo can always demonstrate to clients whether the agreed terms have been correctly followed.
Medendo is certified according to ISO 27001 and NEN 7510. Certification was performed by the independent expert Brand Compliance. Medendo’s partners must meet at least comparable requirements.
Since the data we receive may contain sensitive personal information, this entails risks. To ensure that this data can be safely annotated, we have implemented measures including the following:
Medendo does not use patient or client data for training our systems. Only healthcare providers have access to the data from their own reports. Should access to personally sensitive data be required due to, for example, technical issues, we can only gain access if a healthcare organization gives explicit permission. In that case, we make agreements with the healthcare organization regarding who has access to the data, for what purpose, and for which period.
Every agreement we enter into with a healthcare organization is recorded in a Data Processing Agreement (DPA). This agreement is based on the standard model DPA developed by the Healthcare Industry Organizations (BoZ) in collaboration with healthcare organizations, suppliers, and experts within the healthcare sector. The link to this can be found at the bottom of this document.
The processing of personal data by Medendo complies with the applicable laws and regulations of the General Data Protection Regulation (GDPR).
Medendo stores data, provided it is necessary and consent has been obtained, exclusively in data centers located in the EU. This storage is subject to European laws and regulations regarding data protection.
For further information regarding the GDPR compliance of this website, please consult the Privacy Statement below. If you have any questions, comments, or suggestions regarding the security of Medendo, please contact us at info@medendo.com.