How Emlyn handles patient information, in plain words.
Before anything you type or upload leaves your computer, Emlyn swaps patient names for placeholders such as [PATIENT_A]. Email from your connected account gets the same treatment the moment it arrives, before it is stored or seen by the AI. Emlyn's AI only ever works with the placeholder version. No method is perfect, so if Emlyn can't check a name, it stops and tells you rather than pass it on.
The little that reaches us stays here: Emlyn's primary platform data, AI processing and backups are hosted and processed in Australia. Your identifiable patient information never leaves the country.
Information is encrypted, and every action and access in Emlyn is recorded in an audit log.
Emlyn does not ask for permission to send email. Replies are saved as drafts in your own mailbox, and you send them yourself.
Emlyn only connects to the accounts you choose, and you can disconnect them at any time under Connections. Connect your own account, not a shared clinic inbox.
Password sign-in uses two-step verification. If you sign in with Google or Microsoft, their own second factor applies.
Emlyn does not connect to clinical or practice-management software, and it is not a place to keep patient records.
Emlyn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Questions, or something you think we should know about? Email privacy@emlyn.ai. Full details are in our Privacy Policy.