Legal / DPA
Our standard DPA covers processing of personal data under the GDPR and equivalent laws, including Standard Contractual Clauses for international transfers where required.
Scope of processing
Nature, purpose, and duration of processing on your behalf.
Data categories
Categories of personal data and data subjects concerned.
Subprocessors
Engagement rules and notification of changes.
Security & incidents
Technical and organizational measures and incident notification timelines.
Where personal data is transferred outside the EU/EEA or UK, we rely on the current EU Standard Contractual Clauses and the UK IDTA, complemented by supplementary measures.
EU customers are stored in EU regions by default. Regional residency options are available on Hospital and Enterprise plans.
Request the current DPA at legal@mediprompt.health. Enterprise customers can sign electronically during onboarding, smaller customers can accept via a click-through addendum in the admin console.
