About This DPA
This Data Processing Agreement governs how AIAgens processes personal data on behalf of healthcare providers. As a data processor, we commit to processing data only according to your documented instructions.
Download DPA
Download the DPA in your preferred language. Sign and return to legal@aiagens.ch to establish the data processing relationship.
Key Provisions
Data Processing Scope
We process appointment scheduling data and conversation transcripts. Voice audio is processed in real-time and never stored. Transcripts and routing data are processed in real-time with zero retention — no conversation data is stored by AIAgens. Long-term retention in the patient record is the responsibility of the healthcare provider.
Security Measures
TLS 1.3 encryption in transit, AES-256-GCM at rest. All inbound webhooks verified via HMAC-SHA256 or JWT signatures. OWASP-aligned application security controls including SQL injection prevention, XSS protection, and path traversal hardening. Security controls aligned with ISO 27001 framework.
Sub-processor Management
All sub-processors are contractually bound to equivalent security standards. See our sub-processors list.
Data Subject Rights
We assist you in fulfilling data subject access, rectification, and deletion requests within 72 hours.
Breach Notification
We notify you without undue delay of any confirmed data breach affecting your data.
Audit Rights
You have the right to audit our security measures. On request, we provide our infrastructure providers' SOC 2 reports and can arrange compliance reviews.
Webhook Security
All inbound webhooks verified via cryptographic signatures (HMAC-SHA256, JWT). Replay attack prevention via timestamp validation.
Art. 321 CP Compliance
Under Swiss criminal law, AIAgens operates as an auxiliary to healthcare professionals. Our staff are bound by the same professional secrecy obligations as your employees, with criminal penalties for violations.
Ready to Sign?
Download the DPA, sign it, and return to our legal team. We typically counter-sign within 2 business days.