Our Commitment to Healthcare Privacy

Local-First Architecture

The most significant privacy decision in any software platform is where data is stored. Dermi Atlas Professional is deployed on infrastructure owned and operated by the healthcare practice. Patient images, records, and metadata are stored on the practice's own computers.

This is not a premium tier or an optional configuration. It is the default and only architecture for clinical deployments, so the practice remains the sole custodian of its patient data.

No Analytics on Patient Records

Dermi Atlas Professional includes no analytics or telemetry on the content of patient records or clinical images. License checks carry license and installation details and aggregate totals of the deployment; the totals can be turned off in Dermi Atlas Manager with the Deployment Statistics setting under Administration => Settings.

Software-Licensing Model

The Dermi commercial model is based on software licensing rather than the resale or secondary use of patient data. The handling of personal data, including any restrictions on secondary use, is governed by the Dermi Privacy Policy.

Independent Verification

Privacy commitments are only meaningful when they can be verified. Dermi Atlas is designed to be transparent in its operations:

• The on-premises architecture and its network traffic can be audited by the practice's own IT team.
• Audit logs provide a record of system activity for compliance verification.
• Connections on the HTTPS address use TLS encryption, which can be independently verified.