[ LEGAL ]Data processing
Data Processing Agreement
Updated 11 Oct 2026 · Vaidra
This agreement covers how VAIDRA processes patient and practice data on behalf of a clinic or hospital that uses Vaidra Platform or Vaidra EMR. The organisation is the data fiduciary; VAIDRA is the processor for that workspace.
01
Roles
- The clinic or hospital decides what goes into the workspace, who may access it, and when it is deleted.
- VAIDRA stores, transcribes, and generates drafts only as instructed through the Services.
- Authorised users act for the organisation when they invite colleagues, connect an EHR, or sign this agreement.
02
Instructions
We process Customer Data to provide the Services, keep them secure, and meet law. We do not sell patient data or use it to train public models. Subprocessors are listed on the subprocessors page and may change with notice.
03
Security and incidents
Controls are described in Security. We will notify the organisation of a personal-data breach without undue delay so they can meet their own notice duties.
04
Contact
Questions: hello@vaidra.care. Hospitals that need a signed order form can write to us.