Privacy and regulatory frameworks
These pages describe implemented safeguards and known limitations. They do not assert blanket compliance. Suitability depends on the clinician’s role, lawful basis, patient disclosures, configuration, contracts, and jurisdiction.
HIPAA: United StatesCurrent technical measures and the missing BAA coverage.
GDPR: European UnionStored-data safeguards, transient processing, and controller duties.
LGPD: BrazilStored-data safeguards, international processing, and controlador duties.
CFM Resolution 2.454/2026AI-support measures and physician responsibilities.