Trust & GDPR
Trust, GDPR & AI Act
Compliance is not a feature — it is the foundation. Here is exactly how we handle your data.
EU-only hosting
Servers in Frankfurt am Main. LLM routing to EU endpoints where available; no US round-trip where avoidable.
Consent before every recording
An explicit consent modal is shown before each recording. The acceptance is written to the audit log.
Data retention
Audio is auto-deleted after 30 days by default (configurable per clinic). Notes are retained until you delete them.
Delete my data
Every user can export and delete all their data self-serve from settings — no support ticket needed.
Audit log
All administrative actions (invites, plan changes, retention settings, exports) are logged.
EU AI Act stance
VetMind AI is a documentation assistant for veterinary professionals. Veterinary use falls outside Annex III high-risk categories; we nevertheless apply transparency, human-in-the-loop review and logging as if it did.
Compliance matrix
| Encryption in transit & at rest | Yes |
| Role-based access | Yes |
| Human review before use | Always |
| Model training on your data | Never |
| Sub-processor list | On request |
| DPA | Template included |