Privacy Policy
How Laudos.AI processes personal data, for what purpose and with what safeguards. In plain language, aligned with the LGPD.
1. Controller, scope and roles
Laudos.ai Comércio e Serviços Ltda., CNPJ 60.479.614/0001-20, is the controller of registration, billing, support, security and relationship data. When it processes healthcare data under the institution's instructions, it acts as a processor within the contracted scope.
2. Data processed
Professionals' account data (name, email, CRM and institution), operational data from the reporting workflow and, in the healthcare context, the clinical data present in the exam and the report, processed on behalf of and at the instruction of the contracting institution.
3. Categories and cycles
Audio, intermediate transcription, draft, final report and metadata are distinct categories. Transmission, persistence, logs, retention and backups depend on the feature and the contracted configuration.
Processing, transmitting, storing, logging, retaining and keeping in backup are different operations. The applicable flow is described in the technical documentation of the feature and the deployment.
4. AI and medical supervision
Laudos.AI is a medium-risk assistive application under CFM Resolution 2.454/2026 and is not SaMD (Software as a Medical Device). It does not interpret images, does not make autonomous diagnoses, and does not sign or release reports autonomously. The physician provides the findings, reviews, edits, validates and signs in the official system.
5. Legal bases and sharing
The legal basis is defined according to the purpose and the role of each agent. We do not sell personal data. Necessary subprocessors may process data in Brazil or abroad under contractual and organizational measures; the applicable list is presented to the institution.
6. Retention
Reports and audit trails are retained according to the legal obligation and the contract with the institution acting as controller. Account data is kept while the account exists and deleted upon request, subject to legal obligations.
7. Data subject rights
Requests for access, correction and deletion can be made by email to oi@laudos.ai. When the data is processed on behalf of the institution, we will forward the request to the controller and support the response.
8. DPO contact
Data Protection Officer: oi@laudos.ai, subject "DPO". The full security documentation is available for review by institutions' IT and DPO.
Privacy question?
The Data Protection Officer answers at oi@laudos.ai, subject "DPO".