Who operates Psymira
Psymira is operated by a company based in Berlin. Full and binding details about the operator are in the legal notice.
Your practice’s primary product data — patient records, sessions, documents — are stored and processed in a data centre in Frankfurt. If something goes wrong, an earlier state can be restored. Two processing steps deliberately run differently; more on this below.
The connection between your browser and Psymira is encrypted. Every access is signed in and bound to the permissions your practice has granted: even within the practice, nobody sees more than is intended for them. Access to patient data is logged.
Google provides the technical foundation. Google acts as a processor under Art. 28 GDPR and may use the data only for operation — under the applicable service terms, not for training models without prior permission. Psymira likewise does not train its own models with practice data.
Two steps do not run in Frankfurt, and we say so openly: transcription and text recognition within the EU, and sign-in via Firebase Authentication, which may involve processing in the USA. Which data each of these concerns, who is involved and how long what is stored is set out in full on Privacy & security.