Your Data. Secured in Norway.
Controlled by You.
At Ambr Institute, privacy isn't just a policy—it's our foundation. We believe that to deliver the future of preventive medicine, we must first build an unbreakable framework of trust. No compromises, no hidden clauses.
Our Unwavering Commitment
The three pillars of Ambr's data philosophy.
Stored strictly in Norway
Your health data never leaves the country. All information is encrypted and stored on highly secure servers located physically within Norwegian borders, shielded by world-class infrastructure.
Purpose-Bound Processing
Ambr only stores and processes your data for the direct purpose of operating the platform and delivering your personal health insights. We do not aggregate it to sell to third parties.
Consent-Driven Research
We strongly believe in advancing medical science, but never at the cost of your autonomy. Ambr does not use your data for research without requiring explicit, informed consent from you first.
Absolute Data Sovereignty
When you use Ambr, you are stepping into a digital vault designed exclusively for you. You decide which doctors can view your profile, and you maintain the right to revoke access or delete your data at any time.
-
✓BankID Secured: Access is protected by the highest national authentication standards.
-
✓Explainable AI: You will always be able to see exactly which data points our algorithms used to generate your insights.
-
✓No Hidden Monetization: We charge a subscription fee precisely so we don't have to monetize your personal health information.
Uncompromising Compliance
We understand the immense responsibility of handling Electronic Health Records (EHR). Ambr is engineered from the ground up to reduce your liability and seamlessly integrate with your existing compliance frameworks.
-
✓GDPR & Normen Compliant: Fully aligned with the strict Code of conduct for information security in the healthcare sector (Normen).
-
✓Role-Based Access Control: Strict audit trails and permissions ensure only authorized clinical staff access patient profiles.
-
✓Secure Journaling: Output data is formatted for safe, immediate transfer to your primary EPJ (WebMed, Infodoc, etc.) without intermediate cloud caching.
The Lifecycle of Your Data
1. Secure Collection
Data is gathered via secure patient questionnaires or direct API connections with laboratories. All data in transit is protected using advanced TLS encryption protocols.
2. Anonymization & Norwegian Storage
Upon arrival, personal identifiers are immediately separated from clinical data. The encrypted datasets are stored on isolated servers located physically in Norway.
3. Isolated Processing
When generating your health insights, our AI models process the data in an isolated, temporary environment. Your data is never used to train broader public AI models.
4. User-Controlled Access
The final insights are only decryptable and viewable by the patient via BankID, or by the specific clinical practitioner the patient has explicitly authorized.
Have questions about our data policy?
Our compliance team is ready to provide detailed documentation on our architecture, security measures, and data processor agreements.
Contact Privacy Team