Last updated 11 October 2026 · Applies to med-legal.co.uk and med-legal.net
Your records at a glance
| Storage | Records are stored in Germany, with encrypted recovery copies in the UK. AI processing may take place outside the UK and EU. |
|---|---|
| Access | Claims are accessible to your account and authorised staff providing administration or support. Other customer accounts cannot access them. |
| Protection | Encrypted connections, securely hashed passwords and restricted administrative access. |
| Retention | Original uploads are scheduled for deletion after 24 hours, once active processing finishes. Extracted text and generated documents remain until you delete the claim. Backups expire separately. Retention details. |
| Payments | Card details are handled directly by our payment provider. Med-Legal does not store full card numbers. |
Your documents
Create chronologies and indexed bundles from your uploaded records. Source references help your team review the documents and approve them for use. Our Privacy Policy explains how AI services process your data.
Med-Legal does not train its own models on your records. Verification of our active AI account’s contractual coverage, data-sharing settings and international-transfer arrangement is still pending. Please obtain written confirmation before uploading records requiring those assurances. AI processing details.
You control your claims
You can download your documents and delete a claim when processing is complete. Deleting a claim removes its records, extracted text and outputs from live storage; encrypted backups follow their separate retention schedule.
Data-processing arrangements
Your firm remains the controller of uploaded medical records. Med-Legal acts as your processor. A Data Processing Agreement is available on request and forms part of our Terms & Fees. See our Privacy Policy for service-provider information.
For US customers, a Business Associate Agreement is not currently available. Customers who require one should contact us before uploading protected health information.
Contact
For data-protection questions, documentation or help with a request, email info@med-legal.net. We assist customers with data-rights requests and notify them of reportable breaches as required by law.
Talk to our team →