01
Protection principles
IntelliBra intends to apply purpose limitation, data minimization, accuracy, retention control, confidentiality, accountability, and privacy by design throughout the information lifecycle.
Working draft
Data Protection Policy
The proposed governance and security principles for protecting personal, clinical, and research information.
Last updated
19 July 2026
Scope
Staff, systems, vendors, and research partners
Document owner
ANORA S.A.S.
Working draft. This operational policy is placeholder content for design review. Security owners, controls, retention schedules, and incident procedures require formal approval.
02
Classification and access
Information should be classified according to sensitivity. Access to clinical and research information should follow least-privilege rules and be reviewed regularly.
- Role-based access and strong authentication
- Separation of identifying and research data where practical
- Documented authorization for exports and secondary use
- Audit records for sensitive access and changes
03
Security controls
The final policy should specify approved encryption, backup, endpoint, network, application, and physical-security controls. Offline clinical workflows require the same protection standard as connected workflows.
Vendors and processors should be assessed before receiving protected information.
04
Incident response
Suspected loss, unauthorized disclosure, misuse, or security compromise should be reported immediately, contained, investigated, documented, and escalated to affected institutions or authorities where required.
05
Governance and review
Named owners should maintain inventories, risk assessments, retention schedules, training, vendor records, and evidence of compliance. The policy should be reviewed at least annually and after material system or regulatory changes.
Report a data concern
Contact contact@anora.solutions. A dedicated security and data-protection reporting channel will be confirmed before launch.
contact@anora.solutions