For typical SaaS use, the customer (clinic) is the controller of patient and business data it enters, and Beyond Nova Sàrl processes that data as a processor to provide the Service.
Processing purposes include hosting, authentication, backups, security monitoring, support, billing, and product improvement consistent with the subscription agreement.
We implement appropriate technical and organizational measures described at a high level in our security materials and Privacy Policy.
Subprocessors may process data as described in your agreement or available list.
International transfers use appropriate safeguards where required.
Upon termination, data export and deletion timelines are governed by your contract and in-product tools where available.
Contact: support@mcsclinic.com for a full DPA or BAA discussion.
Legal entity: Beyond Nova Sàrl, commercial register CH-209.245.388, registered office Ave de la Gare 2, CH-1003 Lausanne, Switzerland.