Data agreements

1. Business Associate Agreement and Health Data Processing Addendum
2. BAA Schedule A: State health-data processor terms

• Email to patients is off for clinics in the United States until our Google Workspace business associate agreement covers it.

1. Business Associate Agreement and Health Data Processing Addendum
2. BAA Schedule A: State health-data processor terms
3. BAA Schedule B: California

• Not open to new clinics yet. California law requires controls for sensitive-services records that we're finishing.
• Email to patients is off for clinics in the United States until our Google Workspace business associate agreement covers it.

1. Business Associate Agreement and Health Data Processing Addendum
2. BAA Schedule A: State health-data processor terms

• Email to patients is off for clinics in the United States until our Google Workspace business associate agreement covers it.

1. Business Associate Agreement and Health Data Processing Addendum
2. BAA Schedule A: State health-data processor terms
3. BAA Schedule C: Texas

• Email to patients is off for clinics in the United States until our Google Workspace business associate agreement covers it.
• Email to patients is off for clinics in Texas until it is stored only in the United States, as Texas law requires.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. Ontario Annex: Agent and Electronic Service Provider Terms

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. Saskatchewan Annex: Information Management Service Provider Agreement

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. New Brunswick Annex: Information Manager Agreement

1. Master Data Processing Agreement · Français controls
2. Schedule 1: Description of the processing · Français controls
3. Schedule 2: Technical and organisational measures · Français controls
4. Schedule 3: Sub-processors · Français controls
5. Quebec Annex: Mandate, Service Contract and Communication Outside Québec · Français controls

• Not open to new clinics yet. Quebec law requires our Terms of Service, our Privacy Policy and our agreements in French first, and we are finishing the French texts.
• After acceptance: Before you add patients, your privacy officer must confirm that your privacy impact assessment is done.
• French first. The English text binds only if the clinic expressly chooses it after the French text was provided.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. Alberta Annex: Information Manager Agreement

• After acceptance: Before you add patients, each custodian must confirm that your privacy impact assessment has been submitted to the OIPC.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. Manitoba Annex: Information Manager Agreement

• Not open to new clinics yet. Your law requires a record of every access to patient records, including views. We're finishing that feature.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. Nova Scotia Annex: Agent Terms

• Not open to new clinics yet. Your law requires a record of every access to patient records, including views. We're finishing that feature.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Spain Annex · Español controls

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Austria Annex

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Belgium Annex

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Poland Annex

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Sweden Annex

• Not open to new clinics yet. Your law requires a record of every access to patient records, including views. We're finishing that feature.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Norway Annex

• Not open to new clinics yet. Your law requires a record of every access to patient records, including views. We're finishing that feature.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Italy Annex
7. Approvazione specifica (artt. 1341 e 1342 c.c.) · Italiano controls

• Not open to new clinics yet. Your law requires a record of every access to patient records, including views. We're finishing that feature.
• Also: Italian law requires some clauses to be approved specifically, with an advanced electronic signature. We're finishing that step with Italian counsel.
• A separate box: Italy's specific approval of the listed clauses (Civil Code arts. 1341 and 1342), in Italian, signed with an advanced electronic signature.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. EEA Transfer Module (EU Standard Contractual Clauses)
6. Netherlands Annex (NEN 7510, 7512 and 7513)

• Not open to new clinics yet. Your law requires a record of every access to patient records, including views. We're finishing that feature.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. UK International Data Transfer Addendum
6. United Kingdom Annex

• A UK key-terms box above the checkbox lists every term that limits the clinic's rights or adds to its obligations, the liability cap first.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Mexico Annex: Processing Contract (Remisión) · Español controls

• This patient has no signed health-data consent on file. Your law asks for one in writing before you record their health information.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Colombia Annex: Personal Data Transmission Contract · Español controls

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Peru Annex: Processing Contract and Cross-Border Flow Clauses · Español controls

• Reminder: communicate the cross-border flow to the ANPD and register your database within 30 days.
• This patient has no signed health-data consent on file. Your law asks for one in writing before you record their health information.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Chile Annex: Processing Mandate and Contract, with International Transfer Clauses · Español controls

• Every clinic here accepts before December 1, 2026.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Argentina Annex: Processor Terms · Español controls
6. Model Contract for International Transfers (Argentina, Disp. 60-E/2016) · Español controls

• Reminder: register your database with the National Database Registry.

1. Master Data Processing Agreement · Português controls
2. Schedule 1: Description of the processing · Português controls
3. Schedule 2: Technical and organisational measures · Português controls
4. Schedule 3: Sub-processors · Português controls
5. ANPD Standard Contractual Clauses (Brazil) · Português controls
6. Brazil Annex · Português controls

• Reminder: publish your international data transfer page.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Central America and Caribbean Annex: Costa Rica Section · Español controls

• For each patient: This patient has not yet signed the consent that authorises storing their data in the United States. You can record their health information once they sign it.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Central America and Caribbean Annex: Panama Section · Español controls

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Central America and Caribbean Annex: Dominican Republic Section · Español controls

• For each patient: This patient has not yet signed the consent that authorises storing their data in the United States. You can record their health information once they sign it.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Ecuador Annex: Processing Contract · Español controls

• Not open to new clinics yet. We are completing our registrations with Ecuador's data protection authority.

1. Master Data Processing Agreement
2. Schedule 1: Description of the processing
3. Schedule 2: Technical and organisational measures
4. Schedule 3: Sub-processors
5. Other-Country Attestation

• After acceptance: We're reviewing whether DentalX can serve clinics in your country. Patient features will unlock when the review is complete. We'll email you.
• A separate box: the Other-country attestation. Patient features stay locked until DentalX has reviewed the country.

1. Master Data Processing Agreement · Español controls
2. Schedule 1: Description of the processing · Español controls
3. Schedule 2: Technical and organisational measures · Español controls
4. Schedule 3: Sub-processors · Español controls
5. Other-Country Attestation

• After acceptance: We're reviewing whether DentalX can serve clinics in your country. Patient features will unlock when the review is complete. We'll email you.
• A separate box: the Other-country attestation. Patient features stay locked until DentalX has reviewed the country.

1. Master Data Processing Agreement · Português controls
2. Schedule 1: Description of the processing · Português controls
3. Schedule 2: Technical and organisational measures · Português controls
4. Schedule 3: Sub-processors · Português controls
5. Other-Country Attestation

• After acceptance: We're reviewing whether DentalX can serve clinics in your country. Patient features will unlock when the review is complete. We'll email you.
• A separate box: the Other-country attestation. Patient features stay locked until DentalX has reviewed the country.

1. Master Data Processing Agreement · Français controls
2. Schedule 1: Description of the processing · Français controls
3. Schedule 2: Technical and organisational measures · Français controls
4. Schedule 3: Sub-processors · Français controls
5. Other-Country Attestation

• After acceptance: We're reviewing whether DentalX can serve clinics in your country. Patient features will unlock when the review is complete. We'll email you.
• A separate box: the Other-country attestation. Patient features stay locked until DentalX has reviewed the country.

No agreement can be accepted here yet.

• Not open to new clinics yet. Your health-information law has its own rules for service providers, and we have not prepared the agreement it requires yet.

No agreement can be accepted here yet.

• Not open to new clinics yet. French law requires health data to be hosted by an HDS-certified provider in the European Economic Area, and DentalX is hosted in the United States.

No agreement can be accepted here yet.

• Not open to new clinics yet. Practices with a statutory-insurance contract must use cloud services that meet § 393 SGB V, which DentalX does not yet meet, and we are still reviewing purely private practices.

No agreement can be accepted here yet.

• Not open to new clinics yet. Finnish law requires client information systems to be registered, and DentalX is not yet registered.

No agreement can be accepted here yet.

• Not open to new clinics yet. DentalX is not offered in this country yet.

No agreement can be accepted here yet.

• Not open to new clinics yet. We are not able to provide our service to this country.

No agreement can be accepted here yet.

• Not open to new clinics yet. Your country's law may require health data to be stored locally. We need to review it first.