Super Admin · Governance
EU residency enforced
Trust & Compliance
GDPR posture, EU AI Act register, consent management, and the append-only audit trail.
Open Data-Subject Requests
1
AI Systems Registered
5
Days Since External Audit
12
Breach Drills Passed
4/4
Data Protection (GDPR)
Residency, lawful bases of processing, and breach readiness
All PHI processed and stored in the EU — primary region Nicosia (CY), encrypted DR replica Frankfurt (DE).
| Processing Activity | Lawful Basis |
|---|---|
| Vital-sign telemetry | Art. 9(2)(h) — provision of health care |
| Care-team chat | Art. 6(1)(a) — consent |
| Billing & claims | Art. 6(1)(b) — contract |
| Emergency dispatch | Art. 6(1)(d) — vital interests |
Data Protection Officer
dpo@dexhealth.cy
+357 22 000 000
72-hour supervisory notification protocol · last tabletop drill 2026-06-20 — passed.
Data-Subject Request Queue
Erasure, access, and portability requests under Chapter III
| Data Subject | Request Type | Status | Requested | Action |
|---|---|---|---|---|
|
Maria Georgiou
PT-448219
|
Erasure (Art. 17) | Clinic Review | 2026-07-14 | |
|
Savvas Konstantinou
PT-119283
|
Export (Art. 20) | Completed | 2026-07-02 |
AI System Register (EU AI Act)
All clinical AI functions are classified high-risk under Annex III (health). Output is labelled in-product and requires clinician confirmation before clinical action.
| System | Risk Class | Oversight | Model | Last Conformity Review | |
|---|---|---|---|---|---|
| Triage Priority Scoring | High-Risk · Annex III | Human-in-the-loop | v2.3.1 | 2026-07-02 | AI · Labelled |
| 48-Hour Trend Forecast | High-Risk · Annex III | Human-in-the-loop | v1.8.0 | 2026-06-24 | AI · Labelled |
| Intelligent Alarm Suppression | High-Risk · Annex III | Human-in-the-loop | v2.0.4 | 2026-07-09 | AI · Labelled |
| Dex Assistant — patient triage chat | High-Risk · Annex III | Human-in-the-loop | v3.1.2 | 2026-07-11 | AI · Labelled |
| SOAP Draft Generator | High-Risk · Annex III | Human-in-the-loop | v1.2.7 | 2026-06-30 | AI · Labelled |
Consent Management
Per-purpose consent, renewals, and withdrawals
Active consents
share of enrolled patients with all purposes granted
Renewals due in 30 days
annual re-confirmation window approaching
Withdrawn this quarter
processing halted within 24 h of withdrawal
Audit Trail
Append-only · cryptographically chained · most recent first
2026-07-15 09:12eleni.papacostathreshold defaults edited · systolic 140→140 (no change)
2026-07-15 08:47i.hadjiloizourole granted · katerina.k → RPM Specialist (Larnaca)
2026-07-14 17:30markos.demetrioudata export · cohort GRP-101 vitals → signed PDF
2026-07-14 11:05system.dsrerasure request received · PT-448219 · queued for clinic review
2026-07-11 14:22compliance.botAI conformity review logged · Dex Assistant v3.1.2 · passed
2026-06-20 10:00dpo.officebreach tabletop drill executed · notification chain < 72 h · passed