Trust and legal
Security, privacy, AI and legal facts for data protection officers, IT reviewers and practice owners.
These pages state what Salisan does, as far as it can be checked in the product, in the infrastructure configuration and in the published legal documents. Where a document or decision is not published, the page says so and says how to ask.
The data processing agreement and the subprocessor register are on salisan.com but marked pending review. Read Legal documents for what is published.
Security
Sign-in protection, two-factor, single sign-on, sessions and encryption.
Access and audit
Roles, patient access, Salisan staff access and the audit log.
GDPR and data protection roles
Controller and processor roles, the DPA and subprocessors.
Data location
Where data is stored, what can leave the EU region and how long copies are kept.
Patient rights
Export, correction, restriction and erasure tools.
How the AI works
What the AI features do, which providers receive data and how to limit them.
Clinical responsibility
What the Agent proposes, what you confirm and what Salisan does not claim.
Legal documents
Terms, privacy policy, cookie notice and the documents not published yet.
For privacy questions and documents, write to privacy@salisan.com. For the Terms and legal notices, write to legal@salisan.com.