{"id":2157,"date":"2026-10-23T09:32:45","date_gmt":"2026-10-23T09:32:45","guid":{"rendered":"https:\/\/nordhealth.ai\/privacy-security\/"},"modified":"2026-11-04T02:00:26","modified_gmt":"2026-11-04T02:00:26","slug":"privacy-security","status":"publish","type":"page","link":"https:\/\/nordhealth.ai\/nl\/privacy-security\/","title":{"rendered":"Privacy &#038; Security"},"content":{"rendered":"\n<article class=\"wp-block-group privacy-container is-layout-flow wp-block-group-is-layout-flow\">\n\n\n<header class=\"wp-block-group privacy-header is-layout-flow wp-block-group-is-layout-flow\">\n\n<h1 class=\"wp-block-heading privacy-title\">Privacy &amp; Security<\/h1>\n\n\n<p class=\"privacy-updated wp-block-paragraph\">Updated January 21, 2025<\/p>\n\n<\/header>\n\n\n\n<p class=\"privacy-intro wp-block-paragraph\">This document addresses key concerns that enterprise customers have about deploying our AI assistant, particularly regarding data storage and usage, as well as privacy, security, and compliance. The AI assistant is designed with privacy-by-design principles and AI security best practices in accordance with EU regulations.<\/p>\n\n\n\n<nav class=\"wp-block-group privacy-toc is-layout-flow wp-block-group-is-layout-flow\">\n\n<h2 class=\"wp-block-heading privacy-toc-title\">Table of Contents<\/h2>\n\n\n\n<ol class=\"wp-block-list privacy-toc-list\">\n<li><a href=\"\/#data-storage\">Where is data stored?<\/a><\/li>\n\n\n\n<li><a href=\"\/#data-processing\">Is data processed outside the EU?<\/a><\/li>\n\n\n\n<li><a href=\"\/#data-access\">Who has access to data?<\/a><\/li>\n\n\n\n<li><a href=\"\/#ai-training\">Is patient data used for AI model training?<\/a><\/li>\n\n\n\n<li><a href=\"\/#ai-models\">What AI models are used?<\/a><\/li>\n\n\n\n<li><a href=\"\/#encryption\">Is data encrypted?<\/a><\/li>\n\n\n\n<li><a href=\"\/#data-deletion\">Can data be deleted or exported?<\/a><\/li>\n\n\n\n<li><a href=\"\/#gdpr\">Are you GDPR-compliant?<\/a><\/li>\n\n\n\n<li><a href=\"\/#sub-processors\">Can I get a list of all sub-processors?<\/a><\/li>\n\n\n\n<li><a href=\"\/#certifications\">What certifications and standards do you follow?<\/a><\/li>\n\n\n\n<li><a href=\"\/#availability\">How is availability and uptime ensured?<\/a><\/li>\n\n\n\n<li><a href=\"\/#ownership\">Who owns the patient data?<\/a><\/li>\n\n\n\n<li><a href=\"\/#service-termination\">What happens if we stop using the AI assistant?<\/a><\/li>\n\n\n\n<li><a href=\"\/#responsibility\">Who has ownership and responsibility for patient notes created with the AI assistant?<\/a><\/li>\n\n\n\n<li><a href=\"\/#analytics\">Analytics and cookies<\/a><\/li>\n<\/ol>\n\n<\/nav>\n\n\n\n<div class=\"wp-block-group privacy-sections is-layout-flow wp-block-group-is-layout-flow\">\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"data-storage\">\n\n<h2 class=\"wp-block-heading\">1. Where is data stored?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use only EU-based data centers to provide the service.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Norway: Physica and Psykbase Desktop<\/li>\n\n\n\n<li>Denmark: EasyPractice, Physica, and Psykbase Web<\/li>\n\n\n\n<li>Finland: Diarium<\/li>\n\n\n\n<li>AI functionality: AWS and Azure EU data centers<\/li>\n<\/ul>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"data-processing\">\n\n<h2 class=\"wp-block-heading\">2. Is data processed outside the EU?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No. All data processing, including transcription, enrichment, and AI-generated summaries, takes place within the UK and EEA. No data is sent to the United States or other third countries.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"data-access\">\n\n<h2 class=\"wp-block-heading\">3. Who has access to data?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Only authorized personnel have access to data. All access is logged and monitored.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"ai-training\">\n\n<h2 class=\"wp-block-heading\">4. Is patient data used for AI model training?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not use our customers&#8217; data to train AI models. The AI assistant uses models that have been trained on general, non-customer-specific datasets.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"ai-models\">\n\n<h2 class=\"wp-block-heading\">5. What AI models are used?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use models hosted in AWS EU data centers. For transcription, we also use our own speech recognition models located in the UK and EEA.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"encryption\">\n\n<h2 class=\"wp-block-heading\">6. Is data encrypted?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">All data transfers are conducted through secure and encrypted connections. Customers&#8217; patient record entries are stored encrypted in secure, state-of-the-art data centers protected by both strong physical and digital security measures.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"data-deletion\">\n\n<h2 class=\"wp-block-heading\">7. Can data be deleted or exported?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Yes. Therapists can delete or export transcriptions at any time.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"gdpr\">\n\n<h2 class=\"wp-block-heading\">8. Are you GDPR-compliant?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Yes. We are fully GDPR-compliant. As a processor acting on behalf of the data controller, we fulfill our key obligations, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Strong data security:<\/strong> Extensive technical and organizational measures to protect personal data<\/li>\n\n\n\n<li><strong>Confidentiality:<\/strong> All authorized employees are bound by strict confidentiality agreements<\/li>\n\n\n\n<li><strong>Data breaches:<\/strong> Immediate notification procedures in case of potential breaches<\/li>\n\n\n\n<li><strong>Support for GDPR obligations:<\/strong> We help our customers fulfill their duties to data subjects<\/li>\n\n\n\n<li><strong>Cooperation with authorities:<\/strong> We cooperate with supervisory authorities<\/li>\n<\/ul>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"sub-processors\">\n\n<h2 class=\"wp-block-heading\">9. Can I get a list of all sub-processors?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Yes. We maintain a transparent sub-processor register of all vendors with access to personal data.<\/p>\n\n\n\n<aside class=\"wp-block-group privacy-note is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"wp-block-paragraph\"><strong>Note: For business and security reasons, we do not publish the names of individual model providers as this is confidential information. However, we guarantee that:<\/strong><\/p>\n\n<\/aside>\n\n\n\n<ul class=\"wp-block-list\">\n<li>All AI-related subcontractors operate in Europe<\/li>\n\n\n\n<li>User data is not transferred or processed outside Europe<\/li>\n<\/ul>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"certifications\">\n\n<h2 class=\"wp-block-heading\">10. What certifications and standards do you follow?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our systems and processes are regularly audited by independent parties to ensure the highest level of data security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Nordhealth is ISO 27001 certified.<\/strong><\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"availability\">\n\n<h2 class=\"wp-block-heading\">11. How is availability and uptime ensured?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We have continuous monitoring that immediately alerts the development team if the platform loads slowly or not at all. Detected outages are handled with the highest priority. All code changes go through automated and manual testing to ensure update stability and service continuity.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"ownership\">\n\n<h2 class=\"wp-block-heading\">12. Who owns the patient data?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The company using the service has exclusive ownership of all their patient data.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"service-termination\">\n\n<h2 class=\"wp-block-heading\">13. What happens if we stop using the AI assistant?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Data is deleted after service use ends.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"responsibility\">\n\n<h2 class=\"wp-block-heading\">14. Who has ownership and responsibility for patient notes created with the AI assistant?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The therapist is fully responsible for the accuracy and completeness of all patient record entries. While the AI assistant can help create notes, the therapist must review, confirm, and save these entries to the patient record. The AI assistant only assists in the process and does not own the data.<\/p>\n\n<\/section>\n\n\n\n<section class=\"wp-block-group privacy-section is-layout-flow wp-block-group-is-layout-flow\" id=\"analytics\">\n\n<h2 class=\"wp-block-heading\">15. Analytics and cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use Google Analytics and HubSpot to analyze website traffic. Google Analytics collects anonymous data such as the number of pages visited, visit duration, and device type used. The data is used to improve our service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can prevent Google Analytics data collection by installing the Google Analytics Opt-out browser extension.<\/p>\n\n<\/section>\n\n\n<\/div>\n\n\n\n<footer class=\"wp-block-group privacy-article-footer is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"wp-block-paragraph\">Questions about privacy? Contact us at <a href=\"mailto:support@nordhealth.ai\">support@nordhealth.ai<\/a><\/p>\n\n<\/footer>\n\n\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Privacy &amp; Security Updated January 21, 2025 This document addresses key concerns that enterprise customers have about deploying our AI assistant, particularly regarding data storage and usage, as well as privacy, security, and compliance. The AI assistant is designed with privacy-by-design principles and AI security best practices in accordance with EU regulations. Table of Contents [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2157","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy &amp; Security - Nordhealth Nora<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nordhealth.ai\/nl\/privacy-security\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy &amp; Security - Nordhealth Nora\" \/>\n<meta property=\"og:description\" content=\"Privacy &amp; Security Updated January 21, 2025 This document addresses key concerns that enterprise customers have about deploying our AI assistant, particularly regarding data storage and usage, as well as privacy, security, and compliance. The AI assistant is designed with privacy-by-design principles and AI security best practices in accordance with EU regulations. Table of Contents [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nordhealth.ai\/nl\/privacy-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Nordhealth Nora\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-04T02:00:26+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/nl\\\/privacy-security\\\/\",\"url\":\"https:\\\/\\\/nordhealth.ai\\\/nl\\\/privacy-security\\\/\",\"name\":\"Privacy & Security - Nordhealth Nora\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/#website\"},\"datePublished\":\"2026-10-23T09:32:45+00:00\",\"dateModified\":\"2026-11-04T02:00:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/nl\\\/privacy-security\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nordhealth.ai\\\/nl\\\/privacy-security\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/nl\\\/privacy-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nordhealth.ai\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy &#038; Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/#website\",\"url\":\"https:\\\/\\\/nordhealth.ai\\\/\",\"name\":\"Nordhealth Nora - AI-Powered Documentation for Healthcare Professionals\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nordhealth.ai\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/#organization\",\"name\":\"Nordhealth Nora - AI-Powered Documentation for Healthcare Professionals\",\"url\":\"https:\\\/\\\/nordhealth.ai\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nordhealth.ai\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/nordhealth-nora-dark.svg\",\"contentUrl\":\"https:\\\/\\\/nordhealth.ai\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/nordhealth-nora-dark.svg\",\"width\":1,\"height\":1,\"caption\":\"Nordhealth Nora - AI-Powered Documentation for Healthcare Professionals\"},\"image\":{\"@id\":\"https:\\\/\\\/nordhealth.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy & Security - Nordhealth Nora","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nordhealth.ai\/nl\/privacy-security\/","og_locale":"nl_NL","og_type":"article","og_title":"Privacy & Security - Nordhealth Nora","og_description":"Privacy &amp; Security Updated January 21, 2025 This document addresses key concerns that enterprise customers have about deploying our AI assistant, particularly regarding data storage and usage, as well as privacy, security, and compliance. The AI assistant is designed with privacy-by-design principles and AI security best practices in accordance with EU regulations. Table of Contents [&hellip;]","og_url":"https:\/\/nordhealth.ai\/nl\/privacy-security\/","og_site_name":"Nordhealth Nora","article_modified_time":"2026-11-04T02:00:26+00:00","twitter_card":"summary_large_image","twitter_misc":{"Geschatte leestijd":"4 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nordhealth.ai\/nl\/privacy-security\/","url":"https:\/\/nordhealth.ai\/nl\/privacy-security\/","name":"Privacy & Security - Nordhealth Nora","isPartOf":{"@id":"https:\/\/nordhealth.ai\/#website"},"datePublished":"2026-10-23T09:32:45+00:00","dateModified":"2026-11-04T02:00:26+00:00","breadcrumb":{"@id":"https:\/\/nordhealth.ai\/nl\/privacy-security\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nordhealth.ai\/nl\/privacy-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nordhealth.ai\/nl\/privacy-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nordhealth.ai\/nl\/"},{"@type":"ListItem","position":2,"name":"Privacy &#038; Security"}]},{"@type":"WebSite","@id":"https:\/\/nordhealth.ai\/#website","url":"https:\/\/nordhealth.ai\/","name":"Nordhealth Nora - AI-Powered Documentation for Healthcare Professionals","description":"","publisher":{"@id":"https:\/\/nordhealth.ai\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nordhealth.ai\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/nordhealth.ai\/#organization","name":"Nordhealth Nora - AI-Powered Documentation for Healthcare Professionals","url":"https:\/\/nordhealth.ai\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/nordhealth.ai\/#\/schema\/logo\/image\/","url":"https:\/\/nordhealth.ai\/wp-content\/uploads\/2026\/10\/nordhealth-nora-dark.svg","contentUrl":"https:\/\/nordhealth.ai\/wp-content\/uploads\/2026\/10\/nordhealth-nora-dark.svg","width":1,"height":1,"caption":"Nordhealth Nora - AI-Powered Documentation for Healthcare Professionals"},"image":{"@id":"https:\/\/nordhealth.ai\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/pages\/2157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/comments?post=2157"}],"version-history":[{"count":1,"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/pages\/2157\/revisions"}],"predecessor-version":[{"id":2158,"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/pages\/2157\/revisions\/2158"}],"wp:attachment":[{"href":"https:\/\/nordhealth.ai\/nl\/wp-json\/wp\/v2\/media?parent=2157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}