The most sensitive data a person has is how they really feel. We protect it at the level of the database, not the level of a policy that can be overridden.
TLS 1.3 in transit, AES-256 at rest. Clinical records and session notes are encrypted at row level, with keys scoped per clinician.
Data is hosted in the UK and EU only. Nothing is transferred outside GDPR jurisdiction without explicit consent.
Organisational insight is aggregate only, above a minimum cohort of 10, or 20 per department. No individual is identifiable through any combination of filters.
Employee psychological data is never visible to an employer. This is enforced in the data architecture, not offered as a contractual promise.
Sharing is explicit and never buried in settings. You decide what a clinician sees, and you can withdraw it at any time.
ICO registered from day one, GDPR compliant, with ISO 27001 and NHS DSPT alignment on the roadmap for public-sector deployments.
For security questions or to request our compliance summary, contact admin@aureumglobal.co.uk.
We are happy to walk clinical partners and enterprise buyers through our security and data model in detail.
Get in touch