LGPD safeguards and responsibilities

For patient care, the clinician generally determines the purpose and means of processing as controlador, while Maestra acts as operador. Maestra separately controls account and service-operation data.

Implemented measures

Sensitive patient, clinical, financial, transcript, biometric speaker, assistant, and retrieval values are encrypted on-device before storage and sync.
Readable account and structural metadata supports authentication, relationships, scheduling, consent attestation, processing status, and subscriptions.
Necessary plaintext passes transiently through the relay and contracted processors for transcription, AI, import, retrieval, and PDF tasks. The relay does not log or retain the clinical payload.
Version 3 export provides user metadata and patient records. Each patient PDF uses transient relay rendering.
Account deletion removes Maestra-held records and wrapped key material, making server-side ciphertext unavailable to Maestra. User backups and other-device copies remain outside that boundary.
The counsel-reviewed ROPA records DPAs and international-transfer safeguards, the processing record, incident-response process, retention posture, and designated Encarregado Diogo Carpanedo do Carmo.

Controller responsibilities

The clinician must establish the applicable legal basis for sensitive health and biometric data, inform patients, answer Article 18 requests, complete an RIPD when appropriate, follow professional retention duties, and assess the disclosed processors and international transfers.

Current limitation

Modal processing includes a transient US transfer under the recorded DPA and equivalence basis. Eden processing follows the documented EU path. Maestra does not claim all processing occurs in Brazil.

For statutory privacy matters, contact [email protected].