Early-stage health product. What the AI writes is not medical advice and has not been checked by a clinician. Not medical advice Read the full disclaimer Details
Security

We keep as little as possible. What we keep is encrypted.

Under the GDPR, the EU data protection law, health data needs extra protection. We treat it that way, in our default settings and in our code.

256bit
AES encryption
≤ 1hr
Longest a temporary file is kept
0
Tracking cookies
30days
How long technical logs are kept

Our four main promises

Taken from how the code works, not from marketing slides.

Files deleted immediately

Your original files are deleted as soon as the brief is ready. We do not keep them at any point. If that step is delayed, an automatic clean-up that runs every hour removes them.

Saved briefs are encrypted

When you save a brief, its contents are stored in the database with AES-256 encryption, a strong and widely used standard. No one on our team can read them without the application key.

Use it without signing up

You can make a brief without signing up. If you do not save it, the guest brief is deleted automatically within one hour.

Designed to handle data in line with the GDPR

Under the GDPR, we are the data controller: the party responsible for your data. We aim for GDPR-compliant handling, and we have data processing agreements with our AI provider. Full statement in our privacy policy.

What we do and do not do

What we do

  • Delete your original files as soon as the brief is ready.
  • Encrypt saved briefs with AES-256, including the title and the initials on them.
  • Check passwords against public lists of leaked passwords.
  • Record each time someone you invited opens a brief you shared.
  • Use standard browser security settings (CSP, HSTS, frame-ancestors) that help protect against common web attacks.

What we do not do

  • Sell your data to ad networks.
  • Train AI models on your documents.
  • Set tracking cookies or pixels.
  • Log the contents of your files.
  • Diagnose or recommend treatment.

What happens to a file you upload

  1. You upload a file. It goes into a temporary folder linked only to your current session.
  2. Continuum sends the file to Anthropic, our AI provider, over an encrypted (TLS) connection.
  3. As soon as the answer comes back, we delete the file on our side.
  4. The finished PDF stays at a random link for up to one hour. Then that link is removed too.
  5. If that clean-up is delayed, an automatic check runs every hour and removes anything older than one hour.

Services we use

Anthropic
Runs the AI that reads your documents. By contract, it may not train its models on your data. It may store data only as long as needed to handle your request, plus a short period to check for misuse. Processing takes place in the USA, covered by Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.
Google
Only if you choose to sign in with Google. Google then shares your email address and an account ID with us.
Sentry
Spots technical errors. Receives error reports with the type of error, the file and line of code, and the page address. Personal data is switched off in the settings, and medical content is not sent.
Our hosting provider
Servers in an EU country, bound by a data processing agreement.

What we do not log

We do not log the contents of your files. If something fails, we log how many files there were, their sizes and the type of technical error. To spot misuse, we log the IP address (the internet address of your connection) that starts an upload. We delete these logs after 30 days.

What we do log

When a family member opens a brief you shared with them, our server logs record it: the date and the ID numbers of that person, the owner and the brief. These logs are deleted after 30 days. Your data export lists every access you have given, with the dates you gave and removed it.

Your rights

  • Access: you can download all your data at any time as a JSON file, a standard data format.
  • Erasure: you can delete your whole account in one step.
  • Correction: you can change the title of a brief. The content cannot be edited, on purpose, so it stays true to your documents.
  • Portability: the same JSON file lets you take your data elsewhere.

Report a vulnerability

If you have found a security issue, write to [email protected]. We confirm receipt within two working days and aim to fix the issue within 30 days.

See it in a few minutes.

Sign-up is optional. Nothing you upload is kept after your brief is built, and a guest brief stays available for up to an hour.

Prepare for my next visit