Your trust means everything to us

We understand that data privacy is very important to you and we are taking it very seriously. We’ve made the MEDILIT platform highly secure to comply with Australian healthcare privacy and security standards.

 

 

Compliances

Protecting your privacy and your patient's privacy is our priority.

We conduct regular internal and external audits to ensure our platform and processes comply with the Australian Privacy Act 1988 and other relevant regulations. These audits provide independent verification and validation of our commitment to data security and privacy.

Read our Privacy Policies and Terms of Service for more.

 

APPs COMPLIANT

Compliant with Australian Privacy Principles (APPs) and the Privacy Act 1988.

 

HIPAA Compliant

Compliant with the Health Insurance Portability and Accountability Act (HIPAA), confirming security measures are in place to protect sensitive patient information.

 

ISO-27001 Certified

Certified by the world's best-known standard for information security management systems (ISMS), conforming that risks related to the security of data owned or handled are managed in the highest standards.

 

 

Data and Privacy Protection

Private and Personal Data Anonymisation

Before any analysis, all transcripts are redacted, ensuring that no personally identifiable information is ever linked to data. This protects your privacy and confidentiality throughout the entire process. The sensitive information such as names, DOBs, numbers, emails, ect are replaced by random values before sending for processing. MEDILIT ensures that only medically important information will be processed for clinical note generation.

Encrypted Data Throughout Its Journey

We understand the importance of data protection at every stage. That's why your information is encrypted not just when it's stored in our secure cloud servers, but also while it's transmitted (in transit) between your device and MEDILIT. Additionally, the data remains encrypted even after processing to ensure the highest level of security. The end-to-end encryption ensures that the data are visible only to the user.

Protected Health Information (PHI) Redaction

MEDILIT provides automatic identification of Protected Health Information (PHI) in medical transcriptions that redacts PHIs prior to data analytics. This ensures that the sensitive information remains on your device and transcripts contains redacted values when leaving your device for text processing and analytics. The protected health information is only visible to the users on their devices.

Limited and Temporary
Storage

Transcriptions and outputs are only accessible to you as the end user. We temporarily store them to prevent data loss until they are successfully transferred to your Electronic Medical Record (EMR) and integrated seamlessly into your patient file. Once this transfer is confirmed, no data is stored on MEDILIT's servers. This ensures your information is only used for its intended purpose and then securely removed.

Real-Time Transcription, No Voice Recordings

Unlike many speech recognition systems, MEDILIT never stores voice recordings. Instead, we use advanced technology to convert speech directly into text in real time, eliminating the risk of storing sensitive audio data altogether. Transcriptions are encrypted and protected. MEDILIT permanently remove them as soon as the consult note is generated.

Secure Cloud Storage
in Australia

Your data is encrypted and stored in secure, Australian-based cloud servers, complying with strict local regulations designed to safeguard your information. This keeps your data intact under robust legal frameworks. MEDILIT is partner with renowned cloud providers in security and privacy. MEDILIT policy is to use the cloud only for temporarily data storage to prevent data loss when document generation is in-progress.

Regulatory

MEDILIT is exempt from registration with the Therapeutic Goods Administration (TGA) of Australia.
This exemption signifies that MEDILIT platform and services are not considered a medical device, further demonstrating our commitment to adhering to strict privacy laws without compromising security.

Subprocessors

MEDILIT is partner with globally recognised leader in data security. All our data resides on their state-of-the-art servers, renowned for their robust security measures and constant vigilance against cyber threats.

  • Microsoft Azure
  • Google Cloud
  • AWS
  • Github
  • HuggingFace
  • Stripe

Contact us if you have any questions about data privacy and compliance?

 

 

 

from conversations
to clinical notes with

AI Medical Scribe

MEDILIT Medical AI Scribe

Understanding Our AI Scribe

 

What is an AI Medical Scribe?

It's a secure technology tool that captures the conversation between you and your doctor and automatically writes down the medical notes in real-time. This helps make sure your record is timely, and frees up your doctor to focus fully on you during your visit.


Why is the practice using this technology?

Our goal is to improve the quality and efficiency of care. The AI scribe helps ensure your medical notes are completed quickly. It also gives your doctor more time to focus directly on your health needs during your visit.


How does it actually work during my appointment?

As you and your doctor talk, the AI scribe software listens and converts the speech into text instantly. This text forms a draft note. After your consultation, your doctor carefully reviews this draft, makes any necessary edits for accuracy and completeness, and then approves the final version for your medical record.


Is my consultation being recorded?

No. The AI Scribe system does not record or store any audio of your consultation. It processes the sound of the conversation live, directly converting the spoken words into written text in real-time to create a draft note. Once the text is generated, the audio aspect is gone – no audio file is ever created or saved.


How long is any data kept?

The audio is processed momentarily and not stored. The final, doctor-approved text note becomes part of your official medical record and is kept securely according to the same strict regulations and retention periods as all your other medical records.


Is my information secure and private?

Absolutely. We take your privacy extremely seriously. The AI Scribe service uses advanced encryption and security measures. All processing happens on secure servers located within Australia, complying with Australian privacy laws and healthcare standards.


Who can access the information?

Only your doctor and authorised clinic staff involved in your care can access the draft and final notes, just like standard medical records. Access is logged and audited. The temporary audio processing is automated and not accessed by humans for listening.


Can I opt-out?

Use is completely voluntary. You can choose not to use it, and it will not impact the quality of care you receive. Your doctor will simply take notes manually. You can also change your mind and opt-out at any point, just let your doctor know.

 

 

 

MEDILIT

Read our privacy policy.

MEDILIT

Read our terms of service.

 

Terms of Service

Effective Date: October 10, 2023

This Subscriber Agreement (the "Agreement") is established between MEDILIT PTY LTD., an entity incorporated under the laws of Australia ("MEDILIT"), and the party accepting the terms herein, whether an individual or organisation (referred to as "Customer"). This Agreement becomes binding and effective on the earliest occurrence of: (a) Customer's acceptance by clicking a button indicating agreement; (b) execution by Customer of a Service Order or similar document that references or incorporates this Agreement; or (c) initiation of use by Customer of MEDILIT's services ("Service"). If you are entering into this Agreement on behalf of an organisation, you affirm your authority to bind said organisation to these terms.


1. DEFINITIONS
1.1 “Affiliate” refers to any current or future entity that exercises control over, is controlled by, or is under common management with another entity. For clarity within this definition, 'control' and its related forms signify the direct or indirect possession of authority to govern the strategic decisions and policies of an entity through ownership interests such as voting securities, contractual agreements, or other means.1.2 “MEDILIT Application(s)” encompasses proprietary software applications developed for medical documentation purposes provided via mobile platforms and/or websites owned by MEDILIT. This includes all associated modules, functionalities relevant thereto made accessible to Customers and their Authorised Users along with supporting technological resources. The term also covers updates, enhancements, corrections, derivative works and modifications thereof.1.3 “Authorised User” denotes any individual whom Customer has formally authorised in writing for access to Services pursuant to a Service Order from MediLit. Such individuals must be either employees; students engaged in medical studies; volunteers; healthcare professionals including nurses and physicians affiliated with Customer; representatives from third-party entities providing services for Customer who have agreed contractually not compete with MEDILIT nor disclose confidential information beyond what Section 4 outlines regarding Confidentiality and Security within this Agreement; plus any additional parties mutually agreed upon in writing between both parties involved.1.4 “Business Associate Agreement” (“BAA”) signifies a specific agreement governing creation, usage maintenance disclosure Protected Health Information defined Australian Privacy Act 1988 which hereby incorporated reference within context present document.1.5 “Customer Data” comprises data records materials files content Intellectual Property Rights belonging customer uploaded transmitted received generated stored behalf customer provided accessible customer under terms present agreement.1.6 “Customer Materials” include equipment software programs other materials supplied customer enable provision service MEDILIT’s end.1.7 "Documentation" pertains to all instructional material hard copy digital format detailing capabilities operation Services inclusive but not limited Note builder Platform associated software used conjunction Services subject amendments updates discretion MEDILIT time-to-time basis.


2. PROVISION OF SERVICES AND CUSTOMER OBLIGATIONS
2.1 Service Provision: MEDILIT agrees to provide the Customer and its end users with access to the Services, including MEDILIT Applications and Documentation, on a non-exclusive and non-transferable basis in line with the terms of any applicable Service Order, this Agreement, and accompanying Product Schedules. MEDILIT reserves the right to enhance or modify features of the Services and MEDILIT Applications as long as such changes do not materially diminish their primary functionality.2.2 Execution of Service Orders: Each Service Order that explicitly references this Agreement forms an integral part of it, subject to its conditions herein contained. Should Customers wish to utilise additional Services or increase limits on Authorised Users or other metrics specified in initial or subsequent Service Orders, both parties must execute a new Service Order for such adjustments. Pricing for increased units will be determined according to annual price escalation rights outlined in relevant Service Orders.2.3 Implementation Assistance: As detailed within each specific Product Schedule and/or Service Order, MEDILIT shall furnish implementation services designed to facilitate effective use of the Services by Customer.2.4 Access Rights & Usage Terms: The responsibility lies with the Customer for securing internet connectivity necessary for accessing MEDILIT Application(s). Procedures may be established by MEDILIT detailing how Customers can gain access through various means including but not limited to passwords, websites standards protocols etc., all which are provided under a limited usage licence consistent with stipulations set forth across related documents forming part agreement.2.5 Usage Restrictions: The scope of permitted use is strictly confined within bounds set by this Agreement; no direct or indirect attempts should be made by Customer at disrupting service operations nor gaining unauthorised system network access connected thereto (except as required for legitimate application usage). Prohibited actions include copying, modifying creating derivative works from any portion services applications documentation selling renting leasing, lending sublicensing, distributing transferring aforementioned items, third party decompiling disassembling reverse engineering associated software developing based upon confidential information provided Augmedix without prior consent among others listed herein.2.6 Responsibilities Incumbent Upon Customer: To ensure smooth delivery services per agreement terms customer must extend cooperation providing necessary information facilities equipment reasonably requested. MEDILIT also assist personnel when needed fulfil obligations promptly carry out duties assigned under contract failure comply could result adjustments launch dates corresponding service orders accommodate delays incurred due lack performance customer’s side.


3. OWNERSHIP AND INTELLECTUAL PROPERTY RIGHTS
3.1 Ownership of Services: The proprietary rights to the Services, including MEDILIT Applications, Note builder Platform, Usage Data, Documentation and any related software or enhancements thereof remain exclusively with MEDILIT or its licensors where applicable. Any improvements or modifications made to these elements are also under the sole ownership of MEDILIT.3.2 Customer Data and Materials: All rights, titles and interests in Customer Data and Customer Materials belong unequivocally to the Customer or their respective licensors. Notwithstanding this ownership, Customer grants MEDILIT permission to utilise such materials solely for the purpose of delivering and refining the Services as well as fulfilling obligations outlined within this Agreement.3.3 Handling of Usage Data: It is acknowledged by both parties that MEDILIT may monitor, collect usage statistics for business purposes which include but are not limited to enhancing functionality across services provided by them while ensuring operational efficiency remains intact at all times without disclosing any information publicly that could potentially identify sources from whence it came unless required otherwise by law.3.4 Feedback Contributions: Should there be any suggestions feedback recommendations etc., offered up voluntarily by customer regarding service offerings from MEDILIT. They hereby grant an irrevocable non-exclusive worldwide perpetual royalty-free licence allowing company use copy modify create derivative works based upon said intellectual property freely without restriction whatsoever.


4. CONFIDENTIALITY OBLIGATIONS
4.1 Definition of Confidential Information: In the course of this Agreement, both parties may be privy to information that is confidential and proprietary to the other party ("Confidential Information"). This encompasses technical data, strategic business details, client specifics, non-public financials, pricing structures, methodologies, trade secrets, technological innovations and product plans. It also includes relationships with third parties and internal information about employees or affiliates. MEDILIT's Confidential Information notably comprises the Services themselves along with associated software and Documentation. Customer Data is recognized as the Confidential Information of the Customer.4.2 Exclusions from Confidentiality: The term "Confidential Information" does not include any data or knowledge that (a) becomes part of public domain without breach by receiving party; (b) was in lawful possession prior to disclosure; (c) is rightfully received from a third-party free of confidentiality obligations; or (d) is independently developed without reference to disclosed Confidential Information.4.3 Obligations Regarding Use and Disclosure: Each party agrees not to disclose any aspect of the other’s Confidential Information nor use it for purposes outside those explicitly permitted within this Agreement. Both parties commit to taking all reasonable measures necessary to protect each other's Confidential Information from unauthorised access or distribution by their respective personnel or agents.4.4 Remedies for Breach: Recognising that improper handling of Confidential Information could cause irreparable harm for which monetary damages might not suffice as a remedy, injunctive relief may be sought by an aggrieved party in addition to any other legal remedies available.4.5 Security Measures: MEDILIT shall maintain a robust security program designed appropriately for safeguarding Customer Data against unauthorised access or breaches consistent with industry standards.


5. COMPLIANCE WITH PRIVACY REGULATIONS
5.1 Protection of Patient Information: The parties acknowledge their respective duties in safeguarding Protected Health Information as defined under the Australian Privacy Act 1988, which may be disclosed by Customer to MEDILIT or created by MEDILIT on behalf of Customer pursuant to a Service Order. Both parties commit to executing and adhering to the terms of an appropriate Business Associate Agreement concerning such information.5.2 Use of Protected Health Information: Despite any other provision within this Agreement, Customer grants MEDILIT an irrevocable licence to (a) utilise de-identified data derived from Customer's Protected Health Information for lawful purposes including but not limited to research and analytics; and (b) perform Data Aggregation services that contribute towards the health care operations of the Customer. Such de-identified data remains exclusively owned by MEDILIT and may be used without limitation.


6. FINANCIAL TERMS
6.1 Payment of Fees: In exchange for the provision of Services, Customer is obligated to remit payment to MEDILIT as specified in the applicable Service Order and outlined within this Agreement.6.2 Reimbursement of Expenses: Should any expenses be incurred by MEDILIT as described in a Service Order, Customer shall reimburse MEDILIT for all reasonable and actual costs associated with delivering the Services, including but not limited to travel, accommodation, and shipping expenses ("Expenses").6.3 Billing and Settlement Terms: MEDILIT will issue invoices to Customer covering Fees, Expenses, and any relevant Taxes as delineated in each Service Order. All payments are due in Australian dollars unless otherwise agreed upon. Each invoice must be settled by the Customer within thirty (30) days from its date of issuance unless disputed in good faith. Overdue amounts will accrue interest at a rate of one and one-half percent (1.5%) per month or the maximum permitted by law calculated from the due date until full payment is received by MEDILIT.6.4 Automated Payments: By entering into this Agreement, Customer consents to automated debits via an established Automated Clearing House (ACH) system for fulfilling financial obligations under this Agreement.6.5 Subscription Renewals: Subscriptions automatically renew on either an annual or monthly basis depending on the original terms set forth within the Subscription agreement ("Renewal Date"). Unless notified prior to renewal that services are no longer required or adjustments need to be made; fees applicable for renewal periods will be charged accordingly.6.6 Tax Responsibility: All Fees stated exclude government-imposed taxes unless explicitly included within a Service Order ("Taxes"). It is incumbent upon the Customer to settle all Taxes arising from transactions under this Agreement except where exempted by providing valid proof recognised by tax authorities.


7. DURATION AND DISSOLUTION OF AGREEMENT
7.1 Agreement Term: This Agreement commences on the Effective Date and remains in force until all Service Orders under this Agreement have expired or been terminated.7.2 Termination for Breach: Either party may terminate this Agreement with written notice if the other party materially violates any term of this Agreement and fails to rectify said breach within thirty (30) days following receipt of written notification specifying the infringement, except that payment defaults must be remedied within five (5) business days.7.3 Post-Termination Procedures: Upon termination or expiration of this Agreement or a specific Service Order, Customer's right to access and use the Services ceases immediately. The Customer must discontinue all usage of Services and return any materials provided by MEDILIT related to those Services. Each party is required to return any Confidential Information belonging to the other party upon termination of this Agreement, unless legally mandated otherwise.7.4 Continuation of Certain Provisions: Notwithstanding termination or expiration, certain obligations will persist beyond such events including but not limited to definitions, restrictions on use, proprietary rights acknowledgments, confidentiality commitments, indemnification responsibilities, limitations on liability as well as general terms that by their nature are intended to survive such cessation.

8. WARRANTIES AND ASSURANCES8.1 Mutual Representations: Each party affirms that it possesses the full legal authority to enter into this Agreement and to fulfil its obligations herein. Furthermore, both parties guarantee that the execution, delivery, and performance of this Agreement do not conflict with any other agreements or obligations to which they are bound.8.2 Service Quality Guarantee by MEDILIT: MEDILIT assures that the Services will perform in accordance with their described functionality as set out in each Product Schedule related to the Service Order and will be delivered competently and professionally. Should there be a failure to meet these standards, Customer's exclusive remedy shall be for MediLit to re-perform the deficient Services at no additional cost.8.3 Customer Warranties: The Customer warrants that it holds rightful ownership or has obtained all necessary licences for any data provided within the scope of this Agreement and ensures compliance by Authorised Users with all terms herein; responsibility for any breach by an Authorised User rests with Customer.8.4 Disclaimer of Additional Warranties: Except as expressly stated within Sections 8.1 and 8.2 above, MEDILIT disclaims all other warranties whether express or implied regarding the Services including but not limited to uninterrupted use, merchantability, fitness for a particular purpose or non-infringement of third-party rights.


9. INDEMNITY PROVISIONS
9.1 Customer's Indemnification Obligations: The Customer agrees to defend, indemnify, and hold harmless MEDILIT, its affiliates, officers, directors, employees and agents from any third-party claims or actions arising out of the Customer's gross negligence or willful misconduct in connection with the Services; unauthorised use of the Services by the Customer or Authorised Users; or any breach by the Customer of this Agreement.9.2 MEDILIT's Indemnification Obligations: MEDILIT shall defend, indemnify and hold harmless the Customer against any third-party claims that arise due to MEDILIT’s gross negligence or wilful misconduct while providing Services; a material breach by MEDILIT of its obligations under this Agreement; or allegations that the Services infringe upon intellectual property rights of others (excluding circumstances outlined as Indemnity Exclusions).9.3 Procedures for Claim Management: The indemnifying party’s duty is activated upon receiving prompt written notice from the indemnified party regarding a claim. The indemnifying party will have sole control over defence and settlement negotiations provided that it does not impose additional obligations on nor limit rights under this Agreement for the indemnified party without their express consent.9.4 Limitation on Liability: This Section 9 outlines comprehensive terms for mutual protection against legal liabilities but excludes instances where an underlying claim results from either Party’s violation of this Agreement or arises from their own negligent acts.


10. LIMITATION OF LIABILITY
Under no circumstances shall either party be held liable to the other for any indirect, incidental, consequential, special or exemplary damages arising from this Agreement, including but not limited to loss of revenue, anticipated profits or lost business. This limitation applies regardless of whether such damages were foreseeable and whether a party has been advised of the possibility of such damages.Furthermore, each party's total cumulative liability in connection with this Agreement will not exceed the total amount paid by Customer to MEDILIT within the twelve (12) month period preceding the incident giving rise to any claim.
It is expressly understood that these limitations will not apply to liabilities resulting from gross negligence, fraud or intentional misconduct by either party nor where law prohibits such limitations.


11. ACKNOWLEDGEMENT OF TERMS
The parties herein acknowledge that the limitations, disclaimers of warranties, and exclusions of liability outlined in this Agreement have been actively negotiated and reflect a mutual understanding based on the perceived level of risk associated with their respective obligations under this contract.It is recognised by both parties that provisions limiting liability, disclaiming warranties or excluding certain damages are to be regarded as separate and independent terms and shall remain valid even if other remedies fail to serve their essential purpose.
Both MEDILIT and Customer agree that all such limitations of liability and disclaimers are reasonable in light of the benefits received under this Agreement.


12. GENERAL PROVISIONS
12.1 Governing Law: The laws of Australia, without giving effect to any principles that provide for the application of the law of another jurisdiction, shall govern this Agreement and all related disputes or legal proceedings.12.2 Publicity Rights: Customer consents to MEDILIT's use of its name, logo, and any provided testimonials in promotional materials. Additionally, MediLit may publicly acknowledge the existence of a business relationship between the parties.12.3 Waiver: No waiver by either party of any breach or condition of this Agreement will act as a waiver of any subsequent breach or condition.12.4 Notice Requirements: All formal communications under this Agreement must be in writing and will be considered given when sent via email or five (5) days after being sent by registered mail with proof of delivery.12.5 Severability: If any provision is found unenforceable or invalid, such finding does not affect the remainder of this Agreement which will continue in full force and effect.12.6 Force Majeure: Neither party shall be liable for delays caused by circumstances beyond their reasonable control; however, they must notify each other promptly and resume performance promptly once conditions permit.12.7 Compliance with Laws: Both parties agree to comply with all applicable laws regarding their obligations under this Agreement.12.8 Relationship Status: This Agreement does not create a partnership, joint venture nor an agency relationship between MEDILIT and Customer.12.9 Assignment Restrictions: Neither party may assign this agreement without prior written consent from the other unless due to a change in control like merger or acquisition whereupon notice should be provided to the non-assigning party.12.10 Amendments Procedure: Any amendments made by MEDILIT to these terms will be communicated through updates on its website with significant changes notified at least twenty (20) days before taking effect; continued use after such date constitutes acceptance thereof.12.11 Entire Agreement: This Agreement, inclusive of its attachments, applicable Product Schedules and Service Orders, constitutes the complete and exclusive statement of understanding between the parties. It supersedes all prior agreements or communications regarding the subject matter herein.12.12 Non-Exclusive Remedies: The pursuit by either party of any remedy under this Agreement shall not preclude other remedies under this contract or as allowed by law.12.13 Equitable Relief: Both parties acknowledge that certain breaches of this Agreement may cause irreparable harm for which monetary damages would be insufficient. Therefore, each party reserves the right to seek equitable relief, including injunctions and specific performance as appropriate, in addition to any other remedies provided hereunder or available at law.12.14 No Third-Party Beneficiaries: This Agreement is intended solely for the benefit of MEDILIT and Customer and does not confer any rights or benefits on any third-party entities unless explicitly stated within this document.12.15 Headings for Convenience Only: The headings used throughout this document are intended solely for convenience and have no legal significance in interpreting provisions.

 

 

PRIVACY POLICY

MEDILIT values your privacy. This Privacy Statement explains what kind of personal information we may collect from visitors on this website and why we collect it. It also describes how we protect your personal information and provides contact details if you have any questions.


OUR HEALTHCARE BUSINESS SERVICES
MEDILIT PTY LTD is an Australian healthcare service provider that offers technology solutions to doctors and other clinicians. With adherence to the Privacy Act 1988, our operations ensure utmost protection of personal information. As a Business Associate operating under Australian legislation, MEDILIT operates within the regulatory framework outlined by the Privacy Act 1988, which sets forth comprehensive provisions for safeguarding personal information in our country. This Privacy Statement serves to elucidate the precise privacy practices and protections applicable to the collection of personal information through our online platform operating within Australia.


INFORMATION PROVIDED BY YOU
By voluntarily submitting personal information through our website, it is important to recognize that the Privacy Act 1988 governs the handling and protection of such information. For instance, our web form allows individuals to submit inquiries regarding business opportunities or request product updates. This form captures personal information, including name, address, email address, and any other details provided by users. Additionally, contacting us through email via the website entails the disclosure of personal information such as name, email address, and any supplementary information provided. However, we kindly request that no confidential information be transmitted through our website.In addition to this, registered users of our healthcare services may access a password-protected portal on our website for technical support and administrative purposes. The information collected through this portal is strictly utilised for communication pertaining to administrative matters and technical support. We may employ data aggregation and anonymisation techniques for enhancing our services. However, it is important to note that users are forbidden from transmitting protected health information (PHI) through this administrative and support portal, as per the guidelines of the Privacy Act 1988.


PERSONAL INFORMATION COLLECTED AND YOUR OPTIONS
No personal information is collected from website visitors unless explicitly provided by them. If you contact us with inquiries or express interest in receiving MEDILIT updates, we may respond to your queries and occasionally provide news relating to company developments and product updates. If you do not wish to receive any further publications or emails, please inform us via email. The personal information collected through our website is exclusively used for purposes consistent with the reasons for which it was provided.


NON-PERSONAL INFORMATION COLLECTED
Non-personal web usage information about visitors to our website is collected. This may include details about your browser type, geographic location, IP address, and the pages visited. Furthermore, we may utilise cookies, web beacons, and/or third-party web analytic tools to analyse website traffic.Cookies are small text files or data that your web browser places on your hard drive to store information, enabling websites to recognise whether a particular computer or device has previously visited the site. Cookies facilitate tracking online patterns and preferences, resulting in personalised web experiences. Your browser settings may be adjusted to remove or block cookies. Web beacons, on the other hand, are graphics embedded on web pages or within emails, collecting non-personal web log information about pages visited or emails opened. Web analytics services record non-personal data such as browser type, operating system, visit date and time, referrer information, pages visited on our website, time spent viewing the site, destination page upon leaving our website, and return visits to the site.We may aggregate this non-personally identifiable data to improve our understanding of how visitors employ our site and aid in the management, maintenance, and reporting of website usage. Additionally, we may store IP addresses to detect and prevent fraud.


INFORMATION SHARING
If you provide personal information to us through our website, it may be shared with service providers assisting us in technology or communications management. These service providers are contractually obligated to utilise or disclose personal information solely for the purpose of rendering services on our behalf or to comply with legal requirements. We do not share personal information about individuals with third parties for marketing purposes.In the event that we sell or transfer all or a portion of our business or assets, personal information may be disclosed as part of the transaction. In such cases, we will make commercially reasonable efforts to mandate the recipient to handle the information in accordance with this Privacy Statement. Furthermore, information about individuals may be disclosed if mandated by law, subpoena, court order, legal process, law enforcement or other government authorities, or if disclosure is deemed necessary or appropriate to prevent serious physical harm or in connection with an investigation of illegal or fraudulent activity.


PROTECTION OF PERSONAL INFORMATION
MEDILIT is deeply committed to maintaining the security of personal information. We employ appropriate administrative, technical, and physical security measures designed to safeguard personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. When sharing personal information with third-party service providers, we contractually require them to implement adequate security measures for its protection.


DATA BREACH RESPONSE PLAN
In alignment with the Australian Notifiable Data Breaches (NDB) scheme within the Privacy Act 1988, MEDILIT has established a Data Breach Response Plan to effectively manage and mitigate the potential impacts of data breaches.
Upon identification or suspicion of a data breach, we are committed to:
Containment and Assessment: We will immediately take steps to limit any unauthorised access or distribution of the affected personal information and thoroughly assess the scope and implications of the breach.
Notification: Should the breach pose a risk of serious harm to the individuals affected, we will notify those individuals without undue delay. Furthermore, we shall also report the occurrence to the Office of the Australian Information Commissioner (OAIC) in accordance with the legislative requirements.Evaluation and Response: Our team will investigate the cause of the breach and assess the effectiveness of our response. We shall take the necessary action to rectify any identified weaknesses in our data protection measures and prevent recurrence.Documentation: Each breach will be recorded, along with the steps taken to manage and resolve it. This documentation will help in complying with legal obligations and improving future breach responses.
Communication: Clear communication channels are established to ensure that internal staff and affected individuals are informed appropriately about the data breach and remedial actions.
MEDILIT is committed to continuously improving our security protocols and training our staff to recognise and respond to data breaches promptly and effectively.


DATA STORAGE POLICY
MEDILIT is committed to the responsible handling and secure storage of personal information collected through our services. Our Data Storage Policy reflects this commitment and adheres to Australian data sovereignty requirements.
Local Data Storage: To comply with Australian privacy legislation and ensure the security of personal information, all data collected by MEDILIT is initially stored on servers located within Australia's borders. Our data handling practices are designed to ensure that personal information is kept securely within the jurisdiction, thus subject to Australian privacy laws and protections.
Protection Measures: We employ rigorously tested security protocols to guard against unauthorised access, use, alteration, and destruction of personal information stored on our servers. These include advanced encryption, firewall protection, intrusion detection systems, and regular security audits.Retention Policies: Consistent with the Privacy Act 1988 and other relevant laws, MEDILIT retains personal information only for as long as necessary to fulfil the purposes for which it was collected, and to satisfy any legal, regulatory, tax, accounting, or reporting requirements. Upon expiration of the necessary retention period, personal data is securely deleted or anonymized.Access Controls: Only authorised personnel have access to personal information stored within our systems. We ensure that such access is granted strictly on a 'need-to-know' basis and is governed by confidentiality agreements.Third-Party Providers: In cases where we engage third-party service providers, we mandate through contractual measures that any personal information they handle on our behalf is managed in line with our own stringent security standards and the Australian privacy regulations.
Transfers and Cloud Storage: Should there be a need to transfer data outside Australian borders, such as cloud storage or processing, MEDILIT will take steps to ensure that the transfer is secure and compliant with Australian privacy laws and international data transfer standards. We will also monitor the data protection regulations of the destination country to ensure ongoing compliance.


HIPAA COMPLIANCE ADDENDUM
To further align with global standards and ensure comprehensive protection of health information for users who may fall under the jurisdiction of the United States healthcare system, MEDILIT hereby incorporates the following HIPAA Compliance Addendum into its Privacy Statement. This addendum addresses specific requirements as mandated by the Health Insurance Portability and Accountability Act (HIPAA) of 1996, particularly for Protected Health Information (PHI) that may be accessed, processed, or stored by MEDILIT in providing services to covered entities or their business associates.Designation of HIPAA Compliance Officer
MEDILIT has designated personnel as the HIPAA Privacy and Security Officer responsible for developing, implementing, and maintaining our privacy policies and procedures to comply with HIPAA regulation. MEDILIT’s HIPAA Privacy and Security Officer will also oversee all ongoing activities related to the development, implementation, maintenance of, and adherence to the organisation’s policies and procedures covering the privacy and security of PHI. For any inquired regarding this addendum or our practices around handling protected health information in accordance with HIPAA regulations please contact us via email.
Implementation of Safeguards
MEDILIT commits to implementing appropriate safeguards to prevent unauthorised access to PHI. These safeguards include:
• Administrative Safeguards: Establishing internal policies and procedures designed to manage the selection, development, implementation, and maintenance of security measures to protect electronic PHI (ePHI). Regular training programs for all employees regarding handling ePHI are also included.• Physical Safeguards: Implementing physical measures to protect electronic systems, equipment, and data against unauthorised intrusion when stored on-premises.• Technical Safeguards: Utilising technology solutions that ensure ePHI is transmitted securely across open networks and ensuring that ePHI is not improperly altered or destroyed. Our technical safeguards include encryption methods during data transmission over networks deemed insecure.Risk Assessment & Management
MEDILIT will conduct regular risk assessments to identify potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI it handles. Following these assessments, we will implement security measures sufficient in reducing these risks to a reasonable and appropriate level.
Breach Notification Protocol
In compliance with HIPAA's Breach Notification Rule, MEDILIT has established a breach notification protocol aimed at promptly identifying any breaches involving unsecured PHI. Affected individuals will be notified without unreasonable delay but no later than 60 days from breach discovery. Notifications will include details recommended by HIPAA guidelines.
- Training & Awareness
All staff members at MEDILIT who have access to PHI undergo mandatory HIPAA training upon hiring and annually thereafter. This training ensures awareness about how PHI should be handled securely according to HIPAA standards.
Documentation & Record Retention
MEDILIT maintains documentation of its privacy practices as required by HIPAA regulations including but not limited to risk assessments reports, policy updates records; employee training logs; incident response logs; business associate agreements (BAAs), etc., for six years from their date of creation or last effective date whichever is later.
This addendum serves as part of our commitment towards ensuring full compliance with applicable laws including those relating specifically towards safeguarding protected health information under HIPAA while delivering quality services globally including within jurisdictions like Australia where we primarily operate under local laws such as Privacy Act 1988.For questions or concerns regarding this addendum or our practices around handling protected health information in accordance with HIPAA regulations please contact us via email.


LINKS TO OTHER SITES
For the sake of convenience and information, we may provide links to other websites. However, please bear in mind that we do not manage these websites and are not responsible for their privacy practices or content. Should you have any queries concerning their practices, we recommend directly contacting the respective websites.


CHILDREN
MEDILIT's website is intended for adult use. Children under the age of 18 are prohibited from submitting any personal information to us online.


MODIFYING AND ACCESSING YOUR INFORMATION
If you wish to access or modify any of the information submitted to us through our website, please contact us via email at [email protected]


CHANGES TO THIS NOTICE
We reserve the right to update this Privacy Statement at any time. In the event of an update, we will post the new effective date below. Changes made to this Privacy Statement typically involve editorial modifications or reflect alterations to the services we provide. In the unlikely scenario that significant changes are made, thereby enabling broader sharing of online personal information, this will be prominently announced on our website.


COOKIES
Cookies are small files stored on your computer's hard drive by your web browser. When you access MEDILIT, our server will access these cookies so that it can recognise your computer, and make your experience with MEDILIT smoother. For instance, cookies enable us to remember your Username and Password, saving you from having to re-enter them each time you visit MEDILIT.Most web browsers accept cookies automatically, but you can modify your browser settings to give you the option to decline cookies or to be alerted each time a cookie is proposed to be added to your system. However, it's important to note that if you choose to disable cookies, you might not be able to fully utilise some of the features on MEDILIT.


CONTACT US
At MEDILIT, we acknowledge the significance of your feedback and treat privacy complaints within the health sector with utmost seriousness. Upon receipt of a written complaint pertaining to privacy matters, the Company will promptly initiate a diligent investigation and provide you with a comprehensive response.

 

 

 

Support Inquiries

We respond usually within 24 hours

 

 

 

 

Media inquiries

We respond usually within 24 hours.

 

 

 

 

Business inquiries

We respond usually within 3-5 business days.

 

 

 

 

Privacy inquiries

We respond usually within 3-5 business days.

 

 

 

 

Request a live demo with us

Fill out below and click submit. Our team will contact you to schedule an in-person or online live demo of our product, and answering any questions you have.

 

 

 

 

Request Official Quote

Fill out below and click submit. Our sales team will get back to you within 1 to 3 business days.

 

 

 

 

Join our team

Let us know about your skillset and capabilities.
Fill out below and click submit. Our team will contact you.

 

 

 

 

Thank You!

Your message sent successfully.