Where your clinic and patient data lives

Clinics ask us two questions before anything else: where does the data sit, and who can reach it. Both deserve a plain answer.

Where it sits

Clinic and patient records are held on Microsoft Azure under Microsoft Ireland Operations Limited, inside the European Union. Video consultations, in-app chat, SMS and WhatsApp run through Azure Communication Services within the Microsoft EU Data Boundary. Messages addressed to a recipient outside that boundary are delivered by external carrier networks, which is unavoidable for any SMS anywhere.

Where a clinic uses optional assistance such as drafting, summarising, document reading or dictation, that processing runs in Sweden Central, a regional deployment inside the European Union.

Who can reach it

Access is granted by role, and a role grants the narrowest capability that does the job. Every read, search, change, export and share of a patient record is written to a tamper-evident audit ledger, including attempts that failed.

Analytics never receive patient data. Our public site measures pages and campaigns only, and only after a visitor consents.

The full list of providers, what each one processes and where, is published in our subprocessors policy.