Patient consent. Clear data practices.
Health information is personal. Mirae explains what is collected, how it is used, and who can access it.
Read the Privacy PolicyPatients stay in control.
Choose what to share
People decide what they tell Mirae and which records or devices they connect.
Consent to clinical access
A care team receives identifiable health information only with the person's explicit consent.
Request deletion
People can request deletion of their account and personal data, subject to limited legal requirements.
How data is handled.
Limited access
Access is limited to authorised people and service providers who need it to deliver and support the service.
Security safeguards
Mirae uses encryption, access controls, security monitoring, and vendor reviews to protect information.
Separate research consent
Research uses de-identified or aggregate data. Research involving identifiable data requires separate, explicit consent.
Where our compliance work stands.
These standards apply in different contexts. Their current status is set out below.
- SOC 2
- In progress
- Mirae is undergoing a SOC 2 attestation. We will update this page when the examination is complete.
- UK & EU GDPR
- In progress
- We are working toward full GDPR readiness across the product and organisation.
- HIPAA
- Scope dependent
- HIPAA applies when Mirae handles protected health information on behalf of a covered care provider. The required business associate agreement and safeguards must be in place before that work begins.
Policies and support
Questions about privacy or security?
Email our privacy team