Skip to content
← Back to the overview

Data policy

What Lumen keeps, where it stays, and who can see it.

This page summarizes how Lumen is meant to be used. The agreement signed with your hospital takes precedence if the two differ.

Identifiable patient data stays on the hospital network. It does not leave the site, and it is not sent to the cloud.

Clinical services work with a patient key, not a name or record number. The link back to the person is held in one separate, encrypted store.

For every finding: the model version, the input fingerprint, the threshold and the clinician's action. Every change is also written to the audit log.

Only operational information such as service health and approved model updates. No patient data and no images.

Access follows your role, site and purpose. Each request is checked on the server, and signing out clears the data shown in your browser.

Your hospital sets retention and handles access, correction and erasure requests under the applicable data protection law, including the DPDP Act.

For how the public website handles visitor information, see the privacy policy. Privacy policy.