The platform complies with Federal Decree-Law No. 45 of 2021, which came into effect on 2 January 2022, establishing the framework for protecting personal data in the UAE.
Designed as a secure medical technology platform, not a medical provider. The platform facilitates connections between patients and healthcare professionals.
Online consultations are conducted by licensed doctors, not by the platform itself. All medical decisions remain under the authority of qualified healthcare professionals.
Patient consent is required before online consultations begin, in accordance with PDPL requirements that consent must be proven and meet strict conditions.
All communication uses secure, encrypted channels with TLS 1.2+ for data in transit and encryption at rest using key management systems.
Video consultations are not recorded or stored, protecting patient privacy and minimizing data retention risks.
Access is strictly role-based, limited to the patient and their assigned doctor, with comprehensive audit trails for all data access.
All medical decisions are made only by licensed practitioners. The platform provides technology infrastructure, not medical advice or treatment.
The UAE does not require HIPAA or US-specific healthcare certifications for platforms operating in the region.
HIPAA (Health Insurance Portability and Accountability Act) applies only to the United States and is not a requirement for UAE or international operations.
The platform is fully suitable for UAE and EU operations, with compliance aligned with international standards including GDPR principles.
Additional US compliance modules can be enabled if and when entering the US market, ensuring regulatory readiness for future expansion.
The platform is compliant with UAE regulations and ready for real-world clinical use.
UAE Compliance Overview