Terms, privacy notice, and legal documents

How to explain the current state of legal and compliance documentation without overpromising what is already complete.

What clinics may expect to see

Privacy notice

Data processing terms or DPA where appropriate

Subprocessor information

Retention and deletion expectations

If some legal documents are still being completed, it is better to say that clearly than to imply they are already finalised.

Operational trust pages can support legal documentation, but they should not pretend to replace legal review.

As the platform matures, these pages should connect cleanly to formal legal documents rather than diverging from them.

More trust pages

Security overview Privacy and data handling Subprocessors Retention and deletion Incident response Backups and restore Access control and admin access Monitoring and uptime Security contact and responsible disclosure