Health and care

Health data, with the proof kept.

Clinics, care providers, health-tech firms and their suppliers hold special category data. Eurus shows who can reach it, which suppliers process it, and keeps the evidence an auditor or a customer asks for.

Try Eurus live Book a 20-minute call

The GDPR page in Eurus on a sample business: requirements met by chapter, the two that need work, and the evidence behind each one with its status. — GDPR readiness on a sample business: each requirement, whether it's met, and the evidence that shows it.

What Eurus finds

What Eurus finds in a business like yours.

Connect the systems you already use. Eurus reads them, drafts the registers for a person to confirm, and puts each gap on the To do list with its fix.

01
Who can reach health records
Accounts without two-step sign-in, leavers who can still sign in, and access nobody has reviewed.
02
Suppliers that process health data
Each with its data processing agreement, whether its data leaves the EEA, and its next review.
03
Incidents and their clocks
A breach is counted to the 72-hour notice, with what was found and who decided.
04
Training and policies
Training in date for everyone, and every policy acknowledged by the people it applies to.

What it reads

Sign-in and identity
Email and calendars
Files and documents
Accounts and payments
HR and people
CRM and enquiries
Cloud and code
Website forms

Which laws apply

Which laws apply, and why.

Eurus works out which of the five apply to your business from what it reads and what you tell it. Here's why each one reaches this sector.

GDPR

Health data is special category data: it needs an Article 9 condition as well as a lawful basis, and processing it on a large scale needs a DPIA.

Regulation (EU) 2016/679, Article 9 and Article 35(3)(b)

NIS2

Healthcare providers are a sector of high criticality, and medium and large providers are in scope.

Directive (EU) 2022/2555, Article 2 and Annex I

EU AI Act

AI in a medical device is high-risk through the product rules, and staff using AI tools brings the AI literacy duty.

Regulation (EU) 2024/1689, Article 4, Article 6(1) and Annex I

ISO 27001

When a hospital group or a tender asks for certification, Eurus keeps each control with the checks and evidence behind it.

ISO/IEC 27001:2022

Other sectors

See Eurus on a sample business.

Try Eurus live first: the full app with a demonstration business, no account needed.