Confidential health records demand more than a privacy policy. Here is exactly how RinVita is built — what we do, what we never do, and what you can verify yourself.
All medical documents are encrypted with AES-256 in storage and TLS 1.3 in transit. Access is isolated per user through row-level security, and no RinVita employee can read your documents without an explicit, logged access grant from you. We do not currently offer end-to-end (zero-knowledge) encryption — our AI translation and extraction features require documents to be processed on secure server infrastructure.
All primary infrastructure runs on EU regions (Ireland). Your records do not leave the EU/UK perimeter except when you explicitly generate a share link for a clinician outside that region.
RinVita Ltd is registered with the UK Information Commissioner's Office (ICO Registration ZC123014). Registration is a legal requirement for data controllers, not a certification or an audit. The service is designed with UK GDPR principles in mind: health data is processed on the basis of your explicit consent, collected at signup, and the legal basis and condition for processing special category data are kept under ongoing review.
We never replace your records. Every AI translation and structured summary keeps the original document one click away. AI-generated content is visibly marked throughout the app.
Every record access, share-link generation, and data export is logged with a timestamp and actor. You can download your full audit trail at any time from Settings.
Export every byte of your data (Article 15). Delete your account and all associated records, irreversibly, in one click. Revoke any active share link at any time. We respond to data subject requests within 30 days.