The safety of your data is our priority

At Ambr Institute, protecting your personal health information is our top priority. We've designed our software with the highest standards of privacy and security to build a service you can trust.

  • It's important to understand that your healthcare provider (your doctor, clinic, etc.) is the data controller. They make the decisions about your personal data.

    Ambr acts as the data processor, meaning we handle the data securely on their behalf and according to their instructions.

    If you wish to access, correct, or delete your information, you should contact your healthcare provider directly. Our software gives them the tools they need to help you with your request quickly and securely.

  • We use a multi-layered approach to keep your sensitive information safe from unauthorized access.

    • 🔐Strong Encryption: All of your data is encrypted when it's being sent over the internet and when it's stored in our systems. This makes the information unreadable to anyone without proper authorization.

    • 🆔 Secure Logins: We use trusted national systems for identification. Healthcare professionals must use HelseID, and patients log in with BankID to ensure that only the right people can access the platform.

    • Local Data Storage: Your data is kept safe on secure servers located in Norway (for European patients), or in the country of your provider (outside EU).

    • 🛡️Constant Monitoring: We continuously monitor our systems for any suspicious activity to detect and respond to potential threats quickly.

  • If you are registered in Ambr as part of an health plan with your employers, the same condition apply. Ambr will process your data and provide the result only to you and your clinic..

  • When logging into the platform, you will be asked if you want to consent for your data to be used for further research. If you accept, a copy of your data will be placed in a secured server in Norway, and totally anonymized. This means that it is impossible for anyone in Ambr to re-identify the owner of these data.

We are fully compliant with privacy laws like GDPR and follow the Norwegian healthcare industry's best practices for security (Normen).