Legal

Data protectionGDPR, HIPAA and data residency

How Neurvix meets compliance requirements across every engagement.

1. GDPR compliance

Neurvix operates in full compliance with GDPR. We maintain Data Processing Agreements for enterprise clients processing EU personal data, and follow data minimization and purpose-limitation principles on every engagement.

2. HIPAA capability

For healthcare AI projects involving PHI, we provide HIPAA-compliant annotation environments with Business Associate Agreements, certified medical annotators and encrypted, access-controlled workflows.

3. Data residency

Enterprise clients can specify geographic data residency requirements. We support region-specific processing, including EU-only and US-only workflows, for clients with jurisdictional constraints.

4. Data retention and deletion

Client data is retained only for as long as the contracted engagement requires, per the retention schedule in your statement of work, and is deleted or returned on request at contract termination.

5. Contact

Data protection enquiries can be sent to contact@neurvix.io.

Need a signed DPA or BAA?

Talk to our team about compliance documentation for your engagement.