EU data residency
Our production infrastructure runs in European data centers. Medical data processed by Remedy products stays within the jurisdiction of the European Union. We do not transfer special-category data to third countries.
Trust at the architecture level.
This page is for the people who ask hard questions: data protection officers, security teams, regulators and partners. Here's how it works under the hood.
Anonymization before AI
Before any data reaches language models, an anonymization layer detects and removes personal identifiers. In Inclusia, PII redaction happens on the user's device — documents leave the site's machine already cleaned.
Encryption
Data is encrypted at rest and in transit. Where privacy is the essence of the product — like the journal in After Duty — we use end-to-end encryption: no one but the user can read the content, including us.
Human-in-the-loop
None of our products makes diagnoses or clinical decisions. AI prepares, organizes and proposes — the decision is always made by a qualified human. This is a design principle, not a marketing claim.
Open standards
Remedius IDEA is built on FHIR R4 — the most widely adopted standard for exchanging medical data and the backbone of the European Health Data Space. The data belongs to the facility and can be moved. Authentication follows proven patterns (OAuth2/OIDC, RBAC), with full audit logs.
Compliance path
We apply GDPR today, with DPIAs completed for key data flows. We design to the EU AI Act's high-risk system requirements — before they become mandatory. Our enterprise product architecture is HIPAA-ready, and SOC 2 Type II formalization is on our roadmap.