This Cordex-Atlas Privacy & Data-Flow Statement forms part of the Cordex-Atlas EULA.
Scope & roles
This statement explains what data Cordex-Atlas stores, where it goes, and who is responsible for it. It forms part of the Cordex-Atlas EULA and supplements our Privacy Policy.
For Customer Data, you decide what is collected and why, and you are responsible for it under privacy law. We are the provider of the Software. We do not host or receive your Customer Data through the Software.
What is stored, and where
- Windows install: encrypted records and photos on the PC, plus automatic daily backups to the location you choose.
- Practice and enterprise server: the practice computer or SQL Server you run.
- Dynamics 365: your Dataverse environment.
- Browser: the browser’s local storage on that device, which can be cleared by the browser or the user.
What reaches us
For licence checks, the Software sends Key-Warden your licence key, Plan, user count and an installation identifier. It does not send us patient records, photos or clinical data. Speech recognition runs on the device.
Third parties
- Microsoft (Entra ID sign-in, Dynamics 365, Intune): only in the editions and features you choose.
- FHIR interfaces: only to systems you connect.
Each third party handles data under its own terms and privacy policy.
Security
We design the Software to keep Customer Data in your environment, use encrypted connections, sign licence tokens, and avoid storing secrets in the browser. You are responsible for the security of your devices, servers, tenants, accounts, keys and backups, and for the access you grant.
Retention & deletion
You control how long Customer Data is kept in your environment. Uninstalling the desktop or server software does not delete your database or backups, but you will no longer be able to open them with the Software. Uninstalling the Dynamics 365 solution deletes its tables and every row in them. Export what you need first, for example as HL7 FHIR R4.
We keep licence, account and billing records for as long as needed to provide the service and meet legal obligations (generally 7 years for tax records), then delete or de-identify them.
Your obligations
You must have a lawful basis and any required consents for the data you record, give any required notices, respond to access and correction requests, and meet the Australian Privacy Principles and any health records or sector laws that apply to you. Cordex-Atlas is a clinical record-keeping and documentation tool. It does not diagnose, treat or recommend treatment, and it does not replace clinical judgement. You are responsible for clinical decisions, for record-keeping obligations under the health records laws that apply to you, for patient consent to photos, and for keeping your backups.
Overseas disclosure
Data in your environment stays where you host it. Our licensing and account records are held in Microsoft Azure in Australia. Payment providers and any AI provider you choose may process data overseas under their own terms.
Contact
MYITANDAPPS PTY LTD · ABN 82 659 633 888 · PO Box 7570, Redland Bay QLD 4165, Australia
Email: cordex-atlas@myitandapps.com.au