Zero data retention · Zero data collection · Zero patient data
SHOMA AI

SHOMA® AI

Health API

HIPAAGDPRZero retention

Free tier · No credit card · Cancel anytime

Legal

GDPR Compliance

Last updated: August 5, 2026

Our GDPR Commitment

SHOMA AI Health is designed to help customers meet their obligations under the EU and UK General Data Protection Regulation (GDPR). This page summarises how we support data-subject rights and data-protection principles. Because we operate a strict zero-retention architecture, no patient data is stored: clinical content is cancelled and permanently deleted immediately after the temporary report is generated. Most data-subject rights relating to clinical content are therefore fulfilled by that automatic deletion.

Data-Subject Rights

  • Access (Art. 15)

    Request a copy of the personal data we hold about you. You can export your data from Settings → Account.

  • Rectification (Art. 16)

    Correct inaccurate or incomplete data via your profile or by contacting us.

  • Erasure (Art. 17)

    Delete your account and associated personal data from Settings → Account, subject to legal retention limits.

  • Portability (Art. 20)

    Receive your data in a structured, commonly used, machine-readable format.

  • Restriction & Objection (Art. 18/21)

    Restrict or object to certain processing by contacting us.

  • Withdraw consent (Art. 7)

    Manage your cookie choice at any time via the Cookie Preferences link in the footer. We use only essential technical cookies.

Roles

For documents you submit for processing, you are typically the data controller and we act as your data processor under a Data Processing Agreement (DPA). Hospitals and clinics remain the data controllers for any data they choose to save locally after receiving the temporary report. For account and billing data, we act as controller as described in our Privacy Policy.

International Transfers

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses and provider commitments.

Exercising Your Rights

Use the in-app controls in Settings → Account where available, or contact us via the Contact page. We respond to verified requests within the timeframes required by law.