Data Processing & Security
Technical appendix on data security
Encryption
TLS 1.3 in transit. AES-256 at rest.
Access Control
Strict Row Level Security (RLS) policies.
1. Processor Appointment
User appoints Histyon as Data Processor (Art. 28 GDPR).
2. Security Measures & Data Lifecycle
Defense in Depth approach: Authentication, Isolation, Backups, Audit Logs. Patient data and all associated files can be permanently deleted by the data controller (Doctor) at any time from the dashboard, with immediate removal from all storage systems.