Security

Security and data handling

Where reports are stored, who can see them, how long they are kept and how they are processed.

Last updated 8 November 2026

Storage and access

Uploaded files and the values read from them are kept in a private database and file storage. The database cannot be reached from the internet, only through our application.
In the product, a report is visible only to members of the clinic it was uploaded to. Every request is checked on the server, and these rules are tested automatically before each release.
Files open through links that expire after 15 minutes, issued only to signed-in members of that clinic. Removing a person ends their access at once.
Outside the product, only the AnalystAI team members who run the servers have technical access to stored data, to operate and repair the service.
Traffic between your browser and the service uses HTTPS.

30 days after upload, each report is deleted with its extracted values, reviews and corrections. Every report shows its deletion date, so you can export it first.
You can delete a report sooner. Deletion removes the stored file and page images first, then every value read from it.
A patient record with no report left is deleted 30 days later.
If a deletion fails, the report stays whole, is tried again the next night and our team is alerted.
Database backups are kept for at most 30 days, so something you delete can remain in a backup until it expires.

We store no passwords. You sign in with a one-time link or a 6-digit code sent to your email, valid for 20 minutes and usable once.
Repeated failed attempts from the same address are blocked for a while.
A session lasts up to 30 days. Signing out ends it; "Sign out everywhere" in Account ends all of them.

Reading the page (OCR): Datalab receives the uploaded file.
Extracting the values: the paid Google Gemini API receives the text read from the report. Google's terms for paid use say prompts and responses are not used to improve its products and are logged for a limited time to detect misuse.
Some of this processing may take place outside the EU and Turkey. Where each provider processes and keeps data is confirmed in the data processing agreement before any real patient report.
We do not sell data and do not use your documents to train models.

What the system extracted is never overwritten. Corrections are stored next to it, and every confirmation, correction and exclusion is recorded with who made it and when.
Values confirmed in bulk are recorded apart from values checked one by one, in the app and in every export.
Application logs are filtered so that report text is not written to them.
Uploads, sign-in attempts and processing are rate limited per clinic and per address.