Privacy Policy & KSA PDPL Compliance

1. Zero Cross-Border Data Egress

All Protected Health Information (PHI), consultation audio recordings, structured SOAP documentation, and diagnostic telemetry are processed and stored exclusively within sovereign Class-C certified cloud data centers in Riyadh and Jeddah.

2. Personal Data Protection Law (PDPL) Alignment

In full accordance with Royal Decree No. M/19 and SDAIA regulations, patient consent management is enforced at point-of-care. Data subjects retain explicit rights of access, rectification, and audit logging.

3. Cryptographic Hardware Security

Resting records are encrypted with AES-256-GCM utilizing HSM-managed keys rotated every 90 days. Network communications utilize TLS 1.3 with mandatory certificate pinning.