Privacy & security

Your data, your rules

Healthcare organisations work with sensitive information. That is why you decide what Virtas may use, and everything stays within a protected European environment.

Only the data you need

Choose which sources may be connected and how they are used. What you don't connect, Virtas doesn't see.

Compliant with European regulations

Processing in line with the GDPR. Under the AI Act, Virtas is a limited-risk system; as the provider, Studio 55 carries the transparency obligation.

Within a protected environment

Hosted in Microsoft Azure, exclusively in EU regions. The language model is never trained on your data; this is contractually guaranteed.

Access

Only for your staff

Virtas runs in a shielded, secure environment. Staff sign in with their existing login and password, so you manage access the way you already do today.

  • Shielded, secure environment
  • Single sign-on with existing accounts
  • You decide which sources take priority
External sources

Respect for the source

Virtas does not copy the content of external protocols, such as those from Vilans. It points to the right protocol and refers to the source.

  • Staff always follow the current version
  • Clear source reference with every answer
  • No copies of external protocols in Virtas
Answer quality

Every answer traceable

Virtas only answers from the sources you connect. A control layer checks every answer before it is shown.

  • Always with a source reference
  • No medication dosages, diagnostic or treatment advice
  • No source? Then Virtas says it doesn't know
Staff

Not a staff monitoring system

Nobody sees who asks what. Managers only see pseudonymised questions, and administrators cannot switch this off.

  • Usage is counted pseudonymously
  • Staff can delete their own conversations
  • Works council memo with proposed agreements for the consent decision

ISO 27001 and NEN 7510

Studio 55's information security management is set up in line with ISO 27001 and NEN 7510; the certification audit is scheduled. Until then, you can review the full documentation, including what is still in progress.

Decision kit

Everything you need to decide, per role

A decision on an AI assistant goes through the board, works council, DPO, IT and quality. The Virtas decision kit gives each role its own document, so reviews run in parallel, not one after another.

Board and management

Business case and approach

What Virtas delivers, how to fund it and which risks are covered.

Care manager

What Virtas does during a shift

How it works on the floor, how we measure time saved and what a pilot asks of the team.

Works council

Memo for the works council

What is and isn't recorded, who sees what, and proposed agreements.

DPO and privacy

Privacy file and AI Act statement

Pre-filled DPIA, data processing agreement, sub-processors and retention periods.

IT and CISO

Technical and security profile

Architecture, integrations, security, back-up, SLA and exit within 30 days.

Quality and safety

Answer quality and source management

Where an answer comes from, what happens if it's wrong, and how sources stay up to date.

Questions about security?

We're happy to explain

Request the decision kit, or send us the questions from your DPO, IT department or information security team. We're happy to walk you through every document.