Legal
Trust & Compliance
The detail behind the claims: how patient data is stored, encrypted, deleted, and who controls it.
Legal resources
Data Protection & Security
myCliniBot is a clinical documentation assistant, not an electronic health record (EHR). You create notes here and export them to your practice management system for permanent storage.
Key security highlights
Cyber Essentials certified.
Independently certified against the UK government-backed security standard.
EU-only hosting.
All data stored exclusively in EU data centres (Frankfurt/Netherlands), no international transfers.
Encryption.
TLS 1.2+ in transit, AES-256 at rest.
Secure consent access.
Single-use consent links with password protection.
Auto-deletion.
Clinical notes deleted after 48 hours. Signed consent forms stored for 90 days or until imported into your EHR, with only non-identifiable audit records retained for compliance.
UK GDPR compliant.
Full compliance with UK data protection standards.
Clear data roles
You are the Data Controller.
You keep full responsibility and control over all patient data.
myCliniBot is the Data Processor.
We process patient data only on your documented instructions and delete clinical notes within 48 hours.
For the Data Protection Addendum, sub-processors, or to exercise data rights, see the Privacy Policy or contact hello@myclinibot.com