Exclusive and high-depth patient data, ready for real-world evidence

Independent legal validation by a law firm featured in Who's Who Legal for data  protection

Strict adherence to Swiss Federal Act on Data Protection (FADP) and EU GDPR 
requirements

Completed Data Protection Impact Assessment (DPIA) reviewed by a Data 
Protection Officer

Triple-layer verification: external legal opinion, third-party security audit, DPO 
approval

No dataset accessible without complete validation

Explicit patient consent and physician authorization before any processing

Consent re-validated at multiple stages; withdrawals halt processing immediately

Data minimization enforced - only necessary attributes processed and transmitted

Entire anonymization workflow documented with defined roles and responsibilities

Evidence retained: transfer logs, test reports, approvals

Comprehensive audit trails throughout the data lifecycle

Tier 1 (Physician Practice): Initial de-identification performed locally; all direct
identifiers (name, address, phone, email, n° AHV, full date of birth) removed;
cryptographically strong, single-use Aleatory Patient Identifier (AID) generated with no reverse mapping retained

Tier 2 (Secure Enclave): Isolated, hardened environment with automated residual identifier detection (NER, pattern matching); multi-layer anonymization pipeline 
(generalize quasi-identifiers, normalize attributes, NLP-based text de identification); 
transient tokens destroyed before release

Human validation: QA team reviews flagged records and samples

Only final anonymized datasets are accessible

Secure enclave architecture - raw data physically cannot exit the processing
environment

Staging data and transient artifacts destroyed immediately after processing

Strict contractual prohibition on re-identification attempts

Release only when anonymity acceptance thresholds are met

Continuous monitoring and hardening of infrastructure

Sophisticated access management with role-based controls