Why it matters
Health data is sensitive under LGPD. The clinic decides the purposes: it is the controller, while Clinnu acts as processor.
Privacy in practice
LGPD for clinics, without the complexity
Health data is sensitive data. The system includes protections, and we support the clinic with its processes.
What the system does
Isolation between clinics, 2FA, inactivity logout, tested backups, an audit trail and exports support security, accountability and data subject rights.
What remains the clinic's responsibility
The clinic defines legal basis, data officer, team guidance and processes. We can support implementation with document templates.
Retention and export
The audit trail is kept for 12 months, and the clinic can export its data and each patient's data whenever needed.
Frequently asked questions
LGPD in everyday work
Does Clinnu make a clinic 100% compliant?
There is no official LGPD certification and compliance also depends on clinic processes. Clinnu provides supporting tools.
Who is responsible for patient data?
The clinic is the controller. Clinnu processes data as operator under the contract and clinic instructions.
How do I handle a patient access request?
The system lets you export a patient's data, which helps the clinic answer access and portability requests.
Do you replace legal advice?
No. We can support implementation with templates, but legal decisions require appropriate review.
Privacy starts in the system and continues in routine
See how Clinnu organizes technical controls for your clinic.