|Myukura Trust CenterMYUKURA
Myukura is building clinical AI technology to reduce administrative burden for healthcare professionals. Its platform helps clinicians transform consultations into structured documentation, clearer patient communication, and supervised post-consultation workflows.
Myukura's mission is to make clinical work faster, simpler, and more supportive, while keeping healthcare professionals in control.
Controls
Infrastructure security
Production data access is restricted to authorized users and services through individual credentials, least-privilege permissions and controlled networks.
Encryption key access is restricted to authorized users with an operational need.
Systems require unique username and password or authorized SSH keys.
Automated backups configured with defined retention and periodic verification.
Infrastructure is provisioned and managed through code (Infrastructure as Code).
Production cloud infrastructure is hosted in Europe. Any sub-processing or transfers are managed in accordance with the DPA and applicable regulations.
Keys, tokens and operational secrets are managed through secure storage with restricted access.
Organizational security
Documented procedures for the secure disposal of physical and digital assets.
Active threat detection tools on corporate endpoints and cloud environment.
Security training and guidelines for the team and authorized collaborators.
Documented access control policy covering user provisioning, modifications and deprovisioning.
Formal onboarding and offboarding process including access review.
Product security
All data is encrypted at rest with AES-256 and in transit with TLS 1.3.
Annual penetration testing performed by independent third parties.
Audio is deleted after processing or note approval. It is not retained.
Architecture prioritizes minimizing sensitive data output: audio is not retained and structured clinical text is processed in accordance with applicable policy.
AI-generated clinical notes and outputs require professional review and approval before use.
Internal security procedures
All production changes follow a documented approval process.
Centralized configuration management system for all environments.
Responsible disclosure policy publicly available.
Incident response plan with defined roles, timelines and communications.
Compliance with the open source software conformance standard.
Security assurance for open source dependencies documented internally.
Data and privacy
Customer data is securely deleted at the end of the contractual relationship.
Data classification policy by sensitivity level.
Audio is deleted after processing. Only clinical text is retained in accordance with policy.
No clinical data is used to train models without active customer authorization.
Data Processing Agreement available for all customers under GDPR Art. 28.
Documented procedure to handle requests for access, rectification, erasure, objection, portability and deletion.
We use Google Analytics to understand how this website is used and to improve it. It is only activated if you accept; if you decline, no analytics cookie is installed. You can change your choice at any time from “Cookie settings” at the bottom of the page.