GDPR: European Union
Health and biometric data are special-category data. The clinician must identify an Article 6 basis and an Article 9 condition for the actual care workflow. Maestra’s processor role does not replace that controller decision.
Current measures
Section titled “Current measures”Maestra encrypts sensitive stored patient, clinical, financial, transcript, biometric speaker, assistant, and retrieval values on-device. Readable account and structural metadata remains available for service coordination. Necessary plaintext passes transiently through the relay and contracted processors for transcription, AI, import, retrieval, and PDF tasks.
The counsel-reviewed ROPA records executed DPAs and SCC safeguards for applicable transfers, a processing record, a designated DPO, and incident-response documentation. Modal tasks include a transient US transfer. This means processing is not fully EU-resident even though the documented Eden path is in the EU.
Version 3 export supports access and portability workflows but excludes finance data and reusable templates. Account deletion removes Maestra-held records and wrapped key material. It does not erase exports, user backups, or other-device copies.
Controller responsibilities
Section titled “Controller responsibilities”Clinicians must provide the required privacy information, assess processors and transfers, support data-subject rights, complete a DPIA when required, define retention, and validate whether the service fits member-state professional rules.
For statutory privacy matters, contact Diogo Carpanedo do Carmo at [email protected].