Data location
Where Salisan stores practice and patient data, what can leave the EU region, and how long copies are kept.
The Terms of Service state: "We host Patient Data in the European Union." The privacy policy adds that Salisan hosts for European customers in Frankfurt, Germany. This page shows how that appears in the infrastructure configuration.
Where data is stored
Salisan runs a separate hosting region for European customers. In the infrastructure configuration this region is Amazon Web Services eu-central-1, which is Frankfurt.
In that region Salisan runs the application servers, the PostgreSQL database that holds practice and patient records, the file storage for uploaded documents and recordings, the cache, and email delivery. The EU region accepts practices in the Netherlands and Germany. The server refuses to create a practice in a country its region does not serve.
What can leave the region
The privacy policy says some providers, and Salisan, Inc. as a US company, may process personal data outside the European Economic Area. Where they do, Salisan relies on a European Commission adequacy decision, such as for the United Kingdom or for companies certified under the EU-US Data Privacy Framework, or on the Standard Contractual Clauses. You can ask Salisan for a copy of these safeguards at privacy@salisan.com.
The policy lists locations outside the EU for Requesty's company (United Kingdom), and for Stripe, Google Workspace and Cal.com (EU and United States). The workspace sends AI requests through Requesty's EU endpoint. How the AI works lists which model each feature uses.
Translation of template text and letter subject lines uses Amazon Translate. For the EU region it runs in Frankfurt.
How long copies are kept
| Data | Period | Source |
|---|---|---|
| Database backups | 35 days | Privacy policy, infrastructure configuration |
| Server logs, error reports, performance data | 30 days | Privacy policy |
| Data export archives | 7 days after the export is ready | Workspace export page |
| Agent chats | 90 days after last use by default; the practice can choose 30, 60, 90, 180 or 365 days | Privacy policy, Agent settings |
| Sign-in alert data | 90 days | Privacy policy |
Patient records stay until the practice removes them through patient erasure or closes the practice. See Patient rights.
When a contract ends, the workspace stays readable and exportable until the owner closes the account and for 30 days after that, or longer where the Terms' switching schedule applies. Salisan then deletes customer data, including from backups within 35 days, except data it must keep by law or to defend legal claims. These terms are in section 12.4 of the Terms.
What Salisan has not published
No network or data flow diagram and no audit-log retention periods are published. Ask at privacy@salisan.com.