Every clinic that works with Cellythra is trusting us with their patients’ most sensitive information. We treat that as non-negotiable: EU-hosted, encrypted end to end, and never touched by advertising, data brokers or AI training pipelines.
What we do not do
What we do
Patient data is encrypted at rest and in transit, with keys managed within European infrastructure.
All patient data is hosted and processed within the European Union, under GDPR and EHDS-aligned controls.
Clinicians access only the patients they are responsible for, with full audit logging.
A formal B2B DPA governs every clinic relationship, with clear sub-processor disclosure.
Cellythra acts as a data processor on behalf of licensed healthcare providers acting as data controllers. All processing is performed under a signed Data Processing Agreement (DPA), aligned with Regulation (EU) 2016/679 (GDPR) and prepared for the European Health Data Space (EHDS).
For privacy enquiries: privacy@cellythra.com
This privacy overview is a draft for review with qualified EU counsel before publication. The English version is the legally binding one.