EPD Bridge

Privacy notice

Last updated: 3 October 2026

Publisher and contact

EPD Bridge is published by Aliaksei Tsitovich, trading as Dr. Aliaksei Tsitovich Consulting, Glärnischstrasse 24, 8712 Stäfa, Switzerland. Support and privacy contact: epd-bridge@dearauditor.ch.

Patient data and EPD connection

Patient data: local preparation

The practice imports and reviews documents on its own computer. EPD Bridge processes the PDFs, patient identifiers and demographics, clinical text, document metadata and structured results needed for that work. The practice controls access, local storage and backups. Local records may remain after uninstalling the application.

Patient data: direct connection or temporary relay

Where the EPD community permits it, EPD Bridge connects directly from the practice’s installation to that community. The broker is used only when the community’s connection restrictions require an intermediary. In that case, the route is: EPD Bridge in the practice ↔ our Infomaniak-hosted broker in Switzerland ↔ the EPD community selected by the practice. We provide and operate this broker as part of EPD Bridge. It temporarily handles the information needed to forward the request and return the response, including patient identifiers, metadata and documents. Patient data is handled in memory during transmission and is not stored persistently by the broker. The broker is not a patient database, document repository or archive. Its processing takes place exclusively in Switzerland.

Infomaniak

The practice’s agreements and responsibility

We provide and operate the broker as part of EPD Bridge and arrange its hosting with Infomaniak in Switzerland. The practice does not procure or host a separate broker service. Each practice separately arranges its own service contracts and applicable data-processing agreements with its chosen EPD community and with HIN. Those are agreements for the practice’s EPD access and authentication, not for procuring our broker. The practice determines the clinical purpose, authorized users and lawful access to patient records. We relay the requested information through our broker on the practice’s instructions.

Patient data: storage and requests

Clinical documents and patient records remain on the practice’s installation and in its EPD community under their respective retention rules. The broker does not retain patient documents, identifiers or clinical content as stored records. Authentication sessions and technical operational logs serve connection management and troubleshooting; they are separate from clinical-document storage. Patient information is not used by us for advertising, sale or AI training. For access, correction or deletion of clinical records, contact the practice or responsible EPD community. We assist with enquiries concerning transmissions through our broker.

Website and support

Support email: Google Workspace

Support correspondence goes to epd-bridge@dearauditor.ch through Google Workspace. We use the sender’s contact details, message and voluntarily supplied diagnostics to answer the request and troubleshoot the application. Google and its subprocessors may process this correspondence internationally, including in the United States. Keep support email separate from the clinical workflow: send synthetic examples or redacted diagnostics, not patient records, passwords or access tokens. Correspondence is retained while needed for the request, follow-up or applicable legal obligations.

Google WorkspaceGoogle Workspace: subprocessors

Landing page: Cloudflare

The landing page and this notice are hosted on Cloudflare Workers. They do not upload, retrieve or relay patient documents. Cloudflare handles website request information such as IP address, requested URL, time and technical browser details for delivery and security; its infrastructure is international, including the United States. The site has no advertising cookies or analytics scripts. Following a Store link takes you to Microsoft’s or Apple’s separately operated service. Website hosting is separate from the Swiss broker and from support email.

Cloudflare

Privacy enquiries and changes

Contact epd-bridge@dearauditor.ch for questions or requests about personal data handled by the publisher, including website or support data. Applicable legal retention duties may limit deletion. Clinical-data requests should first go to the responsible practice; the publisher assists within its broker role. You may also contact the Swiss Federal Data Protection and Information Commissioner. We update this notice when the services or processing arrangements change.

FDPIC / EDÖB / PFPDT / IFPDT
epd-bridge@dearauditor.ch