📜 Privacy Policy – OnTop-Health

Effective Date: [2025]

At OnTop-Health, we are committed to protecting the privacy and security of our clients, partners, and end users. This Privacy Policy explains how our solution handles data and ensures compliance with healthcare privacy regulations.

1. No Patient Data Leaves Your Environment

OnTop-Health is deployed as a local container within your infrastructure.
We do not collect, store, or transmit patient health information (PHI) to OnTop-Health servers.
All PHI remains fully under your control.

2. Compliance with Healthcare Standards

OnTop-Health is designed in compliance with applicable healthcare privacy and security regulations, including HIPAA.
Because PHI never leaves your environment, no new Business Associate Agreement (BAA) is required with OnTop-Health.

3. Use of System & Technical Data

OnTop-Health may collect limited technical and usage data (such as logs, system performance metrics, or error reports) to help ensure system stability and support.
This data never includes PHI and is used solely for service improvement.

4. Third-Party Applications

OnTop-Health provides a Marketplace for third-party applications.
When you install an app, it may process PHI within your environment under its own privacy and compliance framework.
We encourage reviewing each third-party app’s privacy policy before use.

5. Data Security

All communication between OnTop-Health and connected applications is encrypted using industry-standard protocols (e.g., TLS).
Access controls, auditing, and logging are built-in to ensure secure operations.

6. Your Responsibilities

As the data controller, your organization is responsible for the proper configuration and operation of OnTop-Health within your environment.
This includes ensuring that installed third-party applications comply with your internal security and privacy policies.

7. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

8. Contact Us

For any privacy-related questions, please contact us at:
📧 Idan@oontop.com