We treat your health data as what it is.
Clinical information is among the most sensitive data there is. This page explains, without hedging, how we protect it and what control you have over it.
Our principles
Three commitments that shape every product decision.
The data belongs to the patient
Not to Lucas, not to the healthcare provider, not to the clinician. The patient grants access, limits it and revokes it at will.
We collect the minimum
We only ask for the information the platform needs to be useful. No advertising trackers, no commercial profiling.
We never sell health information
We do not pass data to advertisers, insurers or third parties for commercial purposes. Our business model is professional plans.
Technical and organizational measures
Concrete practices, described as they are actually implemented.
Encryption in transit and at rest
All traffic is carried over TLS and stored information is encrypted at rest.
Granular access control
Access is granted per patient and per scope, with a configurable expiry and immediate revocation.
Audit log
Every access to a record is logged with who, when and how much — visible to the patient.
Defined data residency
We agree in writing with each organization where information is stored and under what conditions.
Encrypted backups
Regular encrypted backups with tested restore procedures.
Least privilege
Lucas staff do not access identifiable clinical information except at the user's explicit request for support.
Your rights over your data
Under the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), you can exercise the following rights at any time.
- Access everything we hold about you
- Correct any inaccurate data
- Request deletion of your account and history
- Download your data in an open, reusable format
- Restrict or object to specific processing
- Withdraw any consent you have given
To exercise them, write to us and we will respond within the statutory deadlines.
Still have questions?
If your organization or legal team needs technical detail, write to us and we'll work through it.