Dyagnosys Health Analytics Logo

Security & Privacy at Dyagnosys-Mindsense

Your data security and privacy are our top priorities. Learn about how we protect your information and respect your privacy rights.

Security Practices

Secure Cloud Infrastructure

The best cloud infrastructure is crucial for the security of data. This is why we select the best partners and use the best technologies and practices to ensure security, privacy, and the highest level of service for our users and customers.

Dyagnosys-Mindsense stores all production data in physically secure datacenters. We use Amazon Web Services (AWS) solutions, pioneers in supporting health data, to master all aspects of data security.

Learn more about AWS healthcare compliance

Data Centers

Security is ensured by design, starting from careful site selection, based on initial geographic assessment, preventing environmental risks.

Data center redundancy and automatic traffic management enable the maintenance of the highest level of service.

Read more about AWS data centers controls

Network Security

Dyagnosys-Mindsense network is protected by the use of AWS security services (Access Control List, firewall, anti-malware, securing data in transit via TLS, VPN…).

Services & Applications Security

For services and applications, we deliver, maintain, and manage data protection and security along all stages of their lifecycle.

Our developers use the programming best practices (OWASP top 10 security risks) and keep up-to-date with an API Security Checklist.

GDPR Compliance

The European Union's General Data Protection Regulation (GDPR), which becomes effective in May 2018, requires companies to be accountable for how they use, manage, and maintain the personal data of their customers and employees. Dyagnosys-Mindsense is committed to compliance, providing enterprise-grade controls to manage and ensure security of personal data housed in the Dyagnosys-Mindsense Health Cloud.

All personal data or personally identifiable information (PII) is stored securely in our datacenters in Switzerland. Dyagnosys-Mindsense uses encryption to protect data in transit and at rest. Data in transit to our applications is protected using HTTPS. Our personnel are required to execute a confidentiality agreement and must acknowledge receipt of, and compliance with, Dyagnosys-Mindsense's confidentiality and privacy policies. Personnel handling Customer Personal Data are required to complete additional requirements appropriate to their role and will not process Customer Personal Data without authorization.

Dyagnosys-Mindsense automates GDPR compliant deletion of customer data for customers requesting "right to be forgotten" requests. You can manage your personal data directly in our Dyagnosys-Mindsense Health Cloud portal. We offer the possibility to directly delete your account and all your personal data. Dyagnosys-Mindsense's applications also provide data export and modification that comply with GDPR.

Privacy Information

Why We Collect Personal Information

To provide accurate and personalized health assessments, we collect certain types of personal information. This data helps us improve our mental health analysis, deliver better insights, and create tailored support strategies for your well-being.

  • To understand individual health baselines and provide accurate results
  • To enhance the precision of stress and anxiety assessments using advanced AI models
  • To ensure that the recommendations align with your demographic and contextual background

Information We Collect

Demographic Information

Includes your age, gender, and primary language. This data helps us normalize results for stress and anxiety assessments, as these metrics can vary by demographic group.

Contextual Information

We may ask about your current environment (e.g., office, home) and any recent stressors. This data allows us to understand external influences on your stress and anxiety levels.

Health Information

We collect details about your mental health history and current medications. This helps us assess your condition more effectively and provide accurate recommendations.

Data Protection

Protecting your personal information is our top priority. We follow strict healthcare and data privacy regulations, including HIPAA and GDPR, to ensure your data is secure.

  • Encryption: All data is encrypted during storage and transmission
  • Anonymization: Your data is anonymized whenever possible
  • Access Control: Only authorized personnel can access your information
  • Transparency: You can review, update, or delete your data anytime

Contact Information

To report an incident, concern, or for general security questions, please email [email protected] and please ask to speak to the Data Protection Officer.