Privacy
What Medica stores
Your organisation’s controlled documents, the facts you record about your devices, the decisions and signatures you make, and the account data needed to sign you in: email, roles, second-factor public keys. Medica does not store authenticator private keys, passwords in clear text, or the content of external searches beyond the consent record.
Where it lives
In the region your organisation chose at onboarding, on infrastructure Medica operates, or on your own instance under the owner-operated plan. Backups are encrypted at rest with keys held in a managed key service and verified by restore on a schedule.
Who can see it
Members of your organisation according to their roles; scoped grantees for the areas and period you name; Medica operators only when you open a support request, and then on the ledger. No third party receives your documents for training or any other purpose.
What Assist reads
Only the knowledge spaces of your organisation. Prompts and retrieved passages are processed by the configured model provider under a data-processing agreement that forbids retention and training; the provider and region are listed in your organisation’s health page.
Your rights
You can export every document, every ledger row and every signature manifest at any time. Deletion follows the retention your regulatory obligations require (design history is kept for the device’s lifetime plus the statutory period); account data is deleted on request after the last obligation ends.
Contact
privacy@medica.design