We process your account data, the documents and messages you choose to keep, the people you name, and a record of your check-ins, in order to provide the service. Health information you add to a healthcare directive is special-category data and is stored only with your separate, explicit consent.
You can review every consent you have given, withdraw the optional ones, request a copy of your data, or request deletion, from Privacy & consent inside your account. We respond within 30 days.
Some records are kept even after deletion where the law requires it — the audit trail of security and release actions, material already lawfully delivered to a recipient, verification history relied on by release decisions, and the record of consent itself. When you request deletion we tell you exactly what was kept and why. Everything else — vault contents, recordings and their encryption keys — is destroyed outright, not hidden.
Vault contents are encrypted before storage, in private object storage with no public access. Encryption keys are managed separately from the data, in a hardware security module. Data residency is configurable per deployment; for Nigerian users we operate under the Nigeria Data Protection Regulation and the Nigeria Data Protection Act 2023.
Data protection enquiries: admin@vertexatechnologies.com.