Data Processing Agreement Overview
This public overview is not a signed DPA. Customers placing personal or health data in production should execute a counsel-approved DPA or equivalent data-processing terms.
Last updated 24 August 2026
Public-launch gate: this product-aligned draft must be reviewed and approved by qualified privacy, healthcare and commercial counsel for each supported jurisdiction before CareFlow accepts real healthcare data or payment under these terms. It is not presented as legal advice or a signed customer agreement.
Roles and instructions
The customer determines the purpose and means of workspace processing; CareFlow processes that data only to provide, secure, support and maintain the contracted service and on documented lawful instructions.
Confidentiality and security
Access is limited to authorised personnel and service providers subject to confidentiality obligations. Application controls, deployment configuration, customer governance and incident processes form a shared security model.
Subprocessing
CareFlow will disclose relevant subprocessors and require appropriate data-protection and security terms. Optional providers are used only when configured. Material changes should follow the notice mechanism in the executed agreement.
Assistance
CareFlow will reasonably assist with verified data-subject requests, security reviews, incident investigation, deletion/export requests and regulator enquiries to the extent required by the agreement and applicable law.
Return, deletion and audits
Workspace exports and a recoverable deletion workflow support return and deletion. Narrow redacted records may be retained for defined security, financial or legal purposes, then expired.
Audit rights, transfer safeguards, processing locations, notification timelines and liability require customer-specific, counsel-approved contractual terms.
Request an executable DPA
Contact hello@careflowosai.com with the organisation, intended deployment, data categories, locations and regulatory requirements. Do not upload real patient data until the agreement and production controls are approved.