Skip to content
Sanavex
Institutional Protocol

Privacy and Data Handling

This page describes how Sanavex handles data during the pilot, as it is today. We will update it before any real patient document is used.

No model training

Sanavex does not train AI models on patient data without explicit consent. To produce a summary, documents are processed by a third-party AI service.

Our commitment

Security principles

  • Encryption in transit

    Documents travel over encrypted connections. They are processed on our servers and by an AI service to produce a summary, so they are not end-to-end encrypted.

  • Access Controls

    Access is limited by role.

Information we collect

To produce a summary, we process the documents a doctor uploads or photographs: lab reports, prescriptions, discharge summaries and referral letters.

Uploaded documents

Photographs or scans of printed medical documents.

Metadata

Timestamps, user identifiers, and institutional routing tags.

Pilot document handling

Phase 1 of the pilot uses simulated documents only. No real patient documents are uploaded. We will publish retention periods before that changes.

Patient consent responsibility

Before any real patient document is uploaded, the clinic is responsible for informing the patient and recording consent. Sanavex does not contact patients directly.