Skip to content
Sanavex
Institutional Protocol

Privacy and Data Handling

At Sanavex, we adhere to the highest clinical-institutional standards for data security. Our architecture is designed to support the healthcare frontline with absolute confidentiality and precision.

No model training

Sanavex acts as an isolated operational tool, not a data-harvesting platform. We strictly prohibit the use of your institutional data, patient records, or pilot documentation to train our foundational models. Your data remains entirely siloed and is never absorbed into broader AI networks.

Policy Enforced

Security principles

  • End-to-End Encryption

    All data is encrypted both in transit and at rest using enterprise-grade cryptographic standards.

  • Strict Access Controls

    Role-based access ensures that only authorised clinical personnel can view or process documentation.

Information we collect

In order to provide our clinical transcription and structuring services, we temporarily process audio recordings and raw text inputs provided by authorised users.

Input Data

Voice memos, dictations, and unstructured clinical notes.

Metadata

Timestamps, user identifiers, and institutional routing tags.

Pilot document handling

During the Pilot phase, document processing is isolated to designated, secure sandboxes. Documents uploaded for evaluation or initial structuring are retained only for the duration necessary to execute the requested service, after which they are purged according to our institutional retention schedules.

Patient consent responsibility

Sanavex operates as a data processor. The healthcare institution (the data controller) bears the sole responsibility for securing appropriate patient consent for the recording and processing of clinical encounters. Our platform provides the necessary audit trails to support your compliance requirements, but does not interface directly with patients to gather consent.