Eclipse was built with GDPR in mind from the start. The paperwork behind that promise is eleven documents thick, because we did it properly rather than quickly.
01-record-of-processing-activities.pdf – Everything we hold about anyone: the complete list of every kind of information Eclipse holds, why it is held, who it is shared with, and how long it is kept.
05-client-privacy-notice.pdf – The plain-language notice: what we hold, why we hold it, who else touches it, how long we keep it, and your rights. The one to read if you only read one.
06-eclipse-processing-chain.pdf – A step-by-step map of where your information goes during a session, which services touch it at each step, and where it does and does not leave our control.
The whole pack in one document – All of the above, and the rest, gathered into one PDF.
These are our internal working documents. They are not secret - they simply are not written to be read off a page. Ask, and we will send you the one you want.
02-dpia-quantum-turn-eclipse – The risk assessment of the voice sessions and the analysis pipeline: the risks that come with health data and AI, and the safeguard put in place for each one. Request this →
03-mistral-onboarding-checklist – What we verified before letting a language model near client data: the opt-out of training on your data, and the settings that keep it that way. Request this →
04-article-9-condition-memo – The legal basis we rely on to process health information, and why we ask your explicit permission before any analysis is run. Request this →
07-gradium-onboarding-checklist – What we verified before letting the voice service near client data: no training on our data, zero data retention, and the request for EU-only servers. Request this →
08-gradium-residency-request.eml – Our letter asking Gradium to keep your voice data inside the EU, with their reply. Request this →
09-wpx-dpa-request.eml – Our letter asking our mail host to confirm the agreement and the transfer safeguards that cover client mailboxes. Request this →
10-ai-agent-escalation-procedure – What the AI agent used in Eclipse's client-facing work: what it may do, when matters escalate to Richard Flook, and how the oversight duties are discharged. Request this →
11-namecheap-dpa-confirmation.eml – Our letter asking our mail host to confirm the addendum, hosting and subprocessors for the howcaniheal.org mailboxes. Request this →
12-wpx-reply.eml – Their reply to the DPA request, and our follow-up asking for the move to London. Request this →
If you need any of these, just email support@howcaniheal.org with the subject line we used above - nobody has to explain which one you mean.