Data & Security

Tandem naturally follows GDPR and patient data laws to ensure all your data is handled with utmost security. Before initiating usage of our service, a data processing agreement with detailed terms is signed. If interested, we can also provide documentation that can be used for purposes such as risk and impact assessments.

Our Cyber Essentials certification demonstrates our commitment to robust cybersecurity measures. This UK government-backed certification ensures we’ve implemented essential defenses against cyber threats, protecting our systems and your data.

Tandem Health is fully compliant with the 24/25 Data Security and Protection Toolkit (DSPT), demonstrating adherence to NHS data security standards. All organizations accessing NHS patient data must use it to ensure good data security practices and proper handling of personal information.

All patient data is processed and stored in at Microsoft Azure's data center in Gävle, Sweden. Tandem has specific enterprise agreements with Microsoft to ensure compliance and maintain the highest security standards.

Since Tandem operates independently from the medical record system, there is no explicit link to a specific patient. No personal identification numbers or names are logged in association with a note in Tandem. Nonetheless, we handle data as personal information to ensure the highest security standards.

Audio is streamed and processed in real-time during conversations. There is never a complete audio file from the conversation, and as soon as it is transcribed, the audio file is deleted. We recognize the utmost importance of privacy in ensuring that no one can listen to conversations.

If AI models are trained on data, there's a risk that training data could leak when the model is used. Therefore, Tandem does not train any of its AI models on personal data to ensure that your data remains private.

To ensure the highest security standards are followed and maintained, Tandem conducts regular penetration testing. We engage external security firms to review our security measures and attempt to hack the system. All of these tests have confirmed that our system is secure.