Privacy and legal
Privacy PolicyPublicData Processing AddendumPublicTerms of ServicePublicSubprocessor listRestricted
Information Systems Security Policy (ISSP)Restricted
Trust Center
Documents
Open public resources directly. Restricted documents are available on request, subject to review and, where appropriate, an NDA.
Regulatory and evidence
Instructions for UseRestricted
Clinical validationPublicDeclaration of ConformityRestricted
Security practices
A concise overview of the safeguards relevant to Virtuosis services and deployments.
Infrastructure security
- Encryption in transit and at rest, including TLS and AES-256 where applicable
- European processing and storage by default
- Audit logging and data minimisation
Access management
- Access restricted to authorised personnel
- Project-specific roles and permissions
- Bearer-token authentication for the Voice Biomarker API
Privacy lifecycle
- Retention and deletion requirements agreed per implementation
- Pseudonymisation or de-identification where possible
- Applicable access and deletion rights supported
Incident management
- Assessment, containment, investigation and remediation
- Customer and authority notification where required
- Project support channels used for operational communication
- Report suspected vulnerabilities or security incidents through our Contact page.