Security and privacy

Confidentiality as a foundation.
You in control.

Health information deserves care at every step. Learn the data protection and responsible AI principles that guide Ana M APP.

Care with data

Protection around your records.

01

Individual access

Individual authentication and access restricted to authorised people.

02

Information protection

Encryption, secure communication, and monitored environments, as described in the Privacy Policy.

03

Defined purpose

Patient data is processed to enable the features you have contracted, following the professional's instructions.

See the safeguards in the Privacy Policy
Transparency about our references

Privacy, governance and interoperability.

Laws, regulators and technical standards serve different purposes. Understanding them helps you assess technology used with health information.

LGPD

Brazil鈥檚 data-protection law. Purpose, access, retention and individual rights are responsibilities of those handling personal information.

GDPR and ICO

GDPR is a European legal framework; the ICO is the UK data-protection regulator. Applicable requirements depend on the operation, territory and processing arrangements.

HIPAA

US legislation applies to specific covered entities and business associates. Applicability requires assessment of the services, contracts and data processing involved.

HL7 FHIR and traceability

FHIR is a health-data exchange standard. The new clinical layer is being validated with FHIR export, version history and audit trails; availability depends on the version and environment.

These references are not badges, certifications or institutional approval of the platform. Contact our team to discuss a specific use or request security information.

Responsible use

A clear conversation.
Before recording.

Using technology is part of care. The professional assesses whether it suits their practice and informs the patient about the recording.

Read the terms of use
  1. 01

    Explain

    Talk about the transcription, the use of AI, and the purpose of the record.

  2. 02

    Agree

    Ensure the authorisation and legal basis appropriate to the session.

  3. 03

    Review

    Check transcripts and reports before using them in your practice.

Artificial intelligence

Support to organise.
Review to trust.

What the AI does

Helps transcribe and organise information, preparing draft reports for your review.

What stays with you

Assessment, judgement, and clinical decisions. Ana does not diagnose or direct treatment.

AI-generated content may contain errors or omissions. Review before use.

Privacy and LGPD

Clear purposes.
Defined responsibilities.

For patient records, the professional defines the purposes and acts as controller; Ana acts as processor. For the account's own data, Ana acts as controller.

For requests about clinical records, contact the responsible professional. For account data or privacy questions, talk to the team.

Understand the roles and rights
Privacy questions

Information is care, too.

Who can access the records?

Access is restricted to the professional and authorised people, according to the purposes and conditions described in the Privacy Policy.

How long is data kept?

Retention periods depend on the purpose and the applicable obligations. The Privacy Policy explains the retention conditions.

Is data always stored in Brazil?

The Policy provides for service providers that may be located outside Brazil. See the conditions for international transfers and talk to the team to clarify your needs.

Can I request information or deletion of data?

Send your request through the privacy channel. For clinical records, involve the responsible professional; record-keeping obligations may limit deletion.

Talk to the team

A question about data?
Let's clear it up.

Privacy requests and questions: oi@anam.com.br.

Talk about privacy